3 ms·
> Crypto bugs of comparable severity have lived for many, many years in these systems. Do you have any examples of bugs as bad as "password is checked with if
by SquishyPanda23 8y ago
> Crypto bugs of comparable severity have lived for many, many years in these systems.
Do you have any examples of bugs as bad as "password is checked with if statement" living for many years in widely deployed open source software?
- toast0 8y agoHeartbleed was added to OpenSSL two years before it was reported. Some of the nasty downgrade bugs (especially around export encryption) we're probably there longer.