5 ms·
No disrespect meant, but from a security perspective the idea of patching security-critical software with a patch from a stranger on the Internet is kind of cra
by haberman 12y ago
No disrespect meant, but from a security perspective the idea of patching security-critical software with a patch from a stranger on the Internet is kind of crazy, isn't it?
- peterwwillis 12y agoAll open source software is made up of patches from strangers on the internet.
- indutny 12y agoIndeed :) On a serious note, I'm waiting for a reviewal from OpenSSL team.
- twistedpair 12y agoI think I heard that quote on XKCD once.
- haberman 12y agoNot really. Gatekeepers of important open-source software are usually people who are known in the community and often employed by companies who work in the area.
- mzs 12y agoThough Fedor isn't just some complete stranger online.
- haberman 12y agoMaybe that's the part I was missing. There was no link to more information in his (her?) HN profile.
- mikeyouse 12y ago> There was no link to more information in his (her?) HN profile. 'His' apparently. I didn't know either, but apparently he was the first to crack Cloudfare's Heartbleed challenge: http://blog.cloudflare.com/the-results-of-the-cloudflare-challenge/ http://blog.cloudflare.com/the-results-of-the-cloudflare-cha... His LinkedIn / twitter for reference: https://www.linkedin.com/in/indutny https://www.linkedin.com/in/indutny https://twitter.com/indutny https://twitter.com/indutny
- indutny 12y agoLet's be honest about it, this patch hasn't got any attention from OpenSSL team yet, but I heard that some people from the team are interested in it. Never got a response, but it looks correct to me.
- kyledrake 12y agoindutny is no stranger. Highly respected coder.