4 ms·
You should be wary of projects that claim to be secure but have a history of game over vulnerabilities.
by psanford 5y ago
You should be wary of projects that claim to be secure but have a history of game over vulnerabilities.
- psanford 5y agoAs I was saying... another vulnerability was found in croc's Spake implementation in the last day: https://mailarchive.ietf.org/arch/msg/cfrg/icl1AGo62iq8vQM3-NE8XS3bmvo/ https://mailarchive.ietf.org/arch/msg/cfrg/icl1AGo62iq8vQM3-...
- anaganisk 5y agoCrypto is hard, it doesn't wrongly claim its secure. Its a one man show. Isn't that where beauty of open-source lies? Some students were able to get a bug(purposeful) into linux to show how easy it was. Or even the example of Openssl after heart bleed. Some fresh set of eyes look into the code, things get fixed. We have a log of it, developers learn something, and project moves ahead.