4 ms·
"Q. How did you find this bug? A. This bug was discovered by Masashi Kikuchi of Lepidum. He found this bug while studying safe TLS implementations using a proo
by kerneis 12y ago
"Q. How did you find this bug?
A. This bug was discovered by Masashi Kikuchi of Lepidum. He found this bug while studying safe TLS implementations using a proof assistant system Coq."
So they are starting to find actual bugs with Coq? I'm impressed, and would love to know if anybody has more details (lepidum's blog seems down at the moment).
- johnkeeping 12y agoThe ImperialViolet post linked above gives a different URL for the blog post which does work: http://ccsinjection.lepidum.co.jp/blog/2014-06-05/CCS-Injection-en/index.html http://ccsinjection.lepidum.co.jp/blog/2014-06-05/CCS-Inject...
- bashinator 12y agoThere's some good discussion of it on the netsec subreddit. http://www.reddit.com/r/netsec/comments/27dhcn/openssl_security_advisory_seven_security_fixes/chzv3j6?context=2 http://www.reddit.com/r/netsec/comments/27dhcn/openssl_secur...