4 ms·
Well, as the article says: A test case could have caught this, but it's difficult because it's so deep into the handshake. One needs to write a completely separ
by brown9-2 13y ago
Well, as the article says: A test case could have caught this, but it's difficult because it's so deep into the handshake. One needs to write a completely separate TLS stack, with lots of options for sending invalid handshakes.
- joering2 13y agoSomething one would have reasonably expected after second biggest company in the world (NASDAQ, Fortune 50), and first in the IT sector. The entire OS is damn too huge piece of software for Apple not to test intesively to a fanatic stretch. Since all the NSA revelation and the proven extent to which US government lied and continues to lie to its people about all data gathering, I fail to categorize such a simple but yet brilliant overlook as a mistake.
- thrownaway2424 13y agoSo you need a mock peer, whoop-de-fuckin-do. Seems like one of these security weenies could sit down and write a test for once. By the way the test coverage in OpenSSL is piss-poor as well.
- emmett 13y agoThe kind of abusive comments you've been leaving on this thread are not really welcome on HN. Please stop.