2 ms·
It's strange not to mention the OpenSSL situation pre-Heartbleed in this article. It would make a very strong case for funding critical "infrastructure" - I thi
by red_admiral 3y ago
It's strange not to mention the OpenSSL situation pre-Heartbleed in this article. It would make a very strong case for funding critical "infrastructure" - I think the fallout from that was estimated at half a billion dollars or something?
- jeffbee 3y agoIt's not an interesting situation. OpenSSL is a dysfunctional project, maintained by unreasonable, antisocial people, following exactly none of the practices that professional software developers take for granted. Throwing money into that project solves none of its problems. On the other hand many of these problems are solved by just ignoring them and reimplementing their junk, which is what several companies have done.