3 ms·
There were almost no eyes on the OpenSSL codebase, and it was a giant pile of spaghetti for many years with nobody batting an eyelash.
by jolux 6y ago
There were almost no eyes on the OpenSSL codebase, and it was a giant pile of spaghetti for many years with nobody batting an eyelash.
- amelius 6y agoThere's an entire infosec community with white hat hackers that would love to find holes in openssl and talk about them at conferences. Perhaps they gave up on openssl because it has been impenetrable for so long?
- jolux 6y agoAs far as I know it was mostly just conventional neglect like you’d expect. Everyone assumed someone else was dealing with it until it was too late to fix. It’s much improved since then though. Huge portions audited and rewritten.