4 ms·
Does anybody else find this eerily reminiscent of heartbleed? Obscure broken feature that nobody uses (or needs) is enabled by default and allow private keys t
by aexaey 11y ago
Does anybody else find this eerily reminiscent of heartbleed?
Obscure broken feature that nobody uses (or needs) is enabled by default and allow private keys to leak.
- tomjen3 11y agoIt is OpenSSH, the clown car of bugs in obscure features nobody uses. Does anybody know if LibraSSL has released an SSH client yet? I can't code well enough to make security code safe, so I won't be able to help them out on it, but it sounds more and more like OpenSSH can't either.
- jldugger 11y agoYou seem confused. The LibreSSL people released a SSH client years ago, called OpenSSH. Which is not the same as OpenSSL, which suffered Heartbleed.
- Gigablah 11y agoI can't blame him, considering that people have been encouraging this sort of attitude towards the OpenSSL maintainers. It's time they tasted their own medicine.