3 ms·
The discussion at LWN is also pretty insightful and explains how this happened. http://lwn.net/Articles/281901/ http://lwn.net/Articles/281901/ I think the ma
by bbb 18y ago
The discussion at LWN is also pretty insightful and explains how this happened.
http://lwn.net/Articles/281901/ http://lwn.net/Articles/281901/
I think the mantra "don't fix bugs that you don't understand" by Ben Laurie (as linked by randombit, thx) is a really important message to take away from this debacle.
- pmjordan 18y agoI think this particularly applies to anything the OpenSSL guys produce. Their security track record (and understanding of software security) is almost certainly better than yours, regardless of who you are.