[[Infowarrior] - NSA Said to Have Used Heartbleed Bug for Years]

Randy Bush randy at psg.com
Sun Apr 13 14:52:32 UTC 2014


>> the point of open source is that the community is supposed to be doing
>> this.  we failed.
> Versus all of the closed source bugs that nobody can know of or do 
> anything about?

for those you can blame the vendor.  this one is owned by the community.
it falls on us to try to lower the probability of a next one by actively
auditing source as our civic duty.

randy




More information about the NANOG mailing list