Live data from Hacker News

NSA Said to Exploit Heartbleed Bug for Intelligence for Years

bloomberg.com

191–192 of 192 posts

Re: NSA Said to Exploit Heartbleed Bug for Intelligence for Years

#191
post #132

Earlier quoted context omitted.

>>That doesn't have to entail turning the world over to Russian and Chinese hackers. Boogey man FUD, I'm not worried about any hackers from [Insert_forgein_country_elites_want_you_to_hate]. The USgov, NSA and corrupt law enforcement are the only terrorists I'm worried about.

Pretty interesting statement. Why? Nations have track records of not killing/spying on each others?

Nations certainly have a record of killing large numbers of their citizens - particularly in the past century.

It's reasonably to be suspicious of government.

Re: NSA Said to Exploit Heartbleed Bug for Intelligence for Years

#192

Now would be the time to start looking up the backgrounds of the people who implemented heartbeat support. For instance, the same guy responsible for the Heartbeat spec was the author of the OpenSSL implementation. While we do not want to make this into a witch hunt, now that the NSA is involved in Heartbleed, we should definitely rule out malice by checking for direct ties between contributors of known flawed/malici…

We absolutely do not want this. We rely on the goodwill of a lot of really smart people to produce the open source security software we rely. Even if the person who introduced this bug did in fact conspire with the NSA, we would do far more damage by going on a witch hunt. The majority of people working on this software are well-intentioned and if contributing to open source means that they risk being subject to a wi…

Sounds like an great plan. Perhaps you could provide an example from history where your idea works? I'm having difficulty finding one.
Post reply on HN