I don’t believe the Bloomberg story about the NSA having exploited Heartbleed for two years. Not even they would do that. Right? Right?!?
2
2
@stilkov I don’t quite get the surprised reactions. Why would they not? Didn’t they even actively built weaknesses into specs?
1
Replying to @fsteeg
@fsteeg I think there’s a difference. Other vulnerabilities were pretty hard to exploit. This one’s trivial.

Apr 12, 2014 · 7:20 AM UTC

1
Replying to @stilkov
@stilkov Yes, but that still assumes they are serving the general public’s good, when they are probably more like ‘the easier the merrier’
1
@fsteeg I almost wish it were true because I couldn’t see any way for them to justify it. I still don’t think it is.