4 ms·
CIA and FBI servers are easy to find, and many run OpenSSL. Go see which ones have the vulnerability. You won't find it on them. Their branch doesn't have the
by drakaal 13y ago
CIA and FBI servers are easy to find, and many run OpenSSL. Go see which ones have the vulnerability.
You won't find it on them. Their branch doesn't have the issue.
Also look through this http://web.nvd.nist.gov/view/vuln/search-results?query=openssl http://web.nvd.nist.gov/view/vuln/search-results?query=opens...
You will see mentions of this bug in products that use OpenSSL quite often.
- cdelsolar 13y agohaven't seen a mention of it yet.
- PhasmaFelis 13y agoDo you have evidence of that being true a week ago? It's no surprise that the CIA and FBI would scramble to lock down vulnerabilities as soon as they were announced, but that's not proof that they never had them in the first place. After the Snowden business, I wouldn't be hugely surprised if the gov't was secretly aware of Heartbleed, but I'm not comfortable taking a random stranger's word for it.
- nl 13y agoIf the government was aware of Heartbleed,you can be sure that knowledge was buried deep in the NSA, not at your local FBI office. It is laughable to think the FBI knew about this.