my favorite heartbleed blog post so far is from @stripe: "ubuntu had not yet released a patch, so we wrote our own, and finished first"

Apr 10, 2014 · 1:28 AM UTC

7
37
57
Replying to @sama
@sama @stripe they haven’t even updated their ssl certs……
1
1
Replying to @sama
@sama if only we hadn't all been vulnerable for hours and hours :-( this has been such a disaster.
1
Replying to @sama
@sama @stripe
Replying to @sama
@sama link?
Replying to @sama
.@sama isn’t that basically the story of @stripe? Yes, it’s hard. Nobody wants to do it, so we did.
2
7
Replying to @sama
@sama @stripe @mahemoff isn't this being self-congratulatory about not contributing back to a distro?
1
Replying to @sama
@sama @nelhage @stripe would rather we focused on the crappy disclosure process that put us on equal footing with the distros
1
4
4