3 ms·
This analysis doesn't support the conclusion that the bug isn't severe at all. And telling the reader that nobody cares about their email is rather smug. The eg
by lawnchair_larry 13y ago
This analysis doesn't support the conclusion that the bug isn't severe at all. And telling the reader that nobody cares about their email is rather smug. The egos in the security community are out of control.
- chrisrohlf 13y agoThere have been remote code execution vulnerabilities in OpenSSL in the past, yet no one panicked. Those vulnerabilities gave you what heartbleed does and more. The worst part about heartbleed is that its easy to exploit and the tools to do it are readily available. Its bad, as I state, but not the end of the world. The main point of the post was to correct the public analysis of the freelist implementation. Please don't mistake a poor attempt at humor for ego.