Why? Theres a open bug in the TLS issues for the last 1 year. It contains a buffer exploit in the SupplementalData function. --------------------- Supple Me

Why? Theres a open bug in the TLS issues for the last 1 year. It contains a buffer exploit in the SupplementalData function. --------------------- Supple Mental Data... The literal definition of this phrase is: Enough mental data and thats where the exploit hides. Coincidence? No... theres so many distractions [data] out there that this exploit can just sit there in the open. And thats the literal instance of the phrase, "supple mental data to hide an exploit" Another good example is when you have 100 commits per day, from 50 developers in 25 countries, like on the OpenSSL project. Who can security-check all those commits? It's also logistically impossible to verify all of them are not NSA. An even better one is a SSH client supporting 100 protocols, everything from ancient VTxx to un-tested 2016 tls heartbeat code, I wonder which line in the 32,000 contains the exploit or crypto flaw? And another example is how many downvotes my posts on TLS bugs have gotten :D ---------------------- TLS has already had 2 show stopping bugs, they were beginner crypto mistakes like reusing nonce (or null nonce) or were they? also Heartbleed and LogJam its also being purposely mislabeled (?) as https theres no reason to run all of the worlds https and ssh traffic on this. ---------------------- moar? Global r00t continues: http://8ch.net/g/res/2200.html http://8ch.net/g/res/2200.html