3 ms·
Defacing OpenSSL's website might be low-value, but backdooring OpenSSL code (trusting-trust style!) would be about as high-value a target as I could imagine.
by beambot 13y ago
Defacing OpenSSL's website might be low-value, but backdooring OpenSSL code (trusting-trust style!) would be about as high-value a target as I could imagine.
- jonah 13y agoIf they were smart enough to backdoored the code, I'd hope they were smart enough to be as stealth as possible and not deface the site too.
- spenvo 13y agoThere's no way to know that there was only one party involved. In other words, who's to say that the NSA (/GHCQ,etc) was the same party that ultimately defaced the website?