3 ms·

I'm getting sick of these articles. Waiting for Brother Bruce to weigh in and silence this alarmist nonsense.

• tptacek 17y ago
  So what you're saying is that you already knew that OpenSSL had a glitching-style side channel attack, and that you're waiting for someone who has never assessed OpenSSL's code to shut down news stories about it?
  • teilo 17y ago
    No, what I'm saying is that this title is completely alarmist, because the OpenSSL vulnerability that has been discovered is not vulnerable to attack past the data center from which it originates. The phrase "busts public key crypto" is completely misleading.
    • tptacek 17y ago
      It busts public key crypto --- in one of its most popular implementations in both closed and open products, using a class of attacks which has devastated many other implementations --- in settings where power is under the control of attackers, which isn't even a remotely uncommon situation. You think you're debunking a story, but really what you're doing is making it sound like the only exposure you have to cryptography comes from Schneier's blog.