Null pointer dereference – new security bug for OpenSSL • Hacker News Board

openbsddesktop wrote: post #2

You can thank the people that found the bug here: http://www.openbsdfoundation.org/donations.html http://www.openbsd.org/donations.html http://www.openbsd.org/want.html

It's a worthy cause, but please don't repeatedly post these comments. Neither fundraising campaigns nor single-purpose accounts are appropriate in HN threads.

Re: Null pointer dereference – new security bug for OpenSSL

#4

Post by Dorian-Marie » Thu, May 01, 2014, 9:01 PM UTC

openbsddesktop wrote: post #2

You can thank the people that found the bug here: http://www.openbsdfoundation.org/donations.html http://www.openbsd.org/donations.html http://www.openbsd.org/want.html

Wow, all your comments are about donating to OpenBSD.

Re: Null pointer dereference – new security bug for OpenSSL

#5

Post by [deleted] » Thu, May 01, 2014, 9:03 PM UTC

Dorian-Marie wrote: post #4

openbsddesktop wrote: post #2

You can thank the people that found the bug here: http://www.openbsdfoundation.org/donations.html http://www.openbsd.org/donations.html http://www.openbsd.org/want.html

Wow, all your comments are about donating to OpenBSD.

[deleted]

Re: Null pointer dereference – new security bug for OpenSSL

#6

Post by ticktocktick » Thu, May 01, 2014, 9:04 PM UTC

Are we better off using decoder rings and snail mail at this point?

Re: Null pointer dereference – new security bug for OpenSSL

#7

Post by openbsddesktop » Thu, May 01, 2014, 9:13 PM UTC

Dorian-Marie wrote: post #4

openbsddesktop wrote: post #2

You can thank the people that found the bug here: http://www.openbsdfoundation.org/donations.html http://www.openbsd.org/donations.html http://www.openbsd.org/want.html

Wow, all your comments are about donating to OpenBSD.

Then here is another type: a previous security bug:

Apr 12, 2014

http://ftp.openbsd.org/pub/OpenBSD/patches/5.5/common/004_op...

-->>

2014-04-30

http://www.freebsd.org/security/advisories/FreeBSD-SA-14:09....

needed 18 days to reach other OSes, ex.: FreeBSD.. interesting lag..

Re: Null pointer dereference – new security bug for OpenSSL

#8

Post by eyeareque » Thu, May 01, 2014, 9:13 PM UTC

Are there any write ups for this yet? I can't find a CVE or anything on this one. No word from OpenSSL yet either.

Re: Null pointer dereference – new security bug for OpenSSL

#9

Post by bottombutton » Thu, May 01, 2014, 9:25 PM UTC

ticktocktick wrote: post #6

Are we better off using decoder rings and snail mail at this point?

There's always Windows.

Re: Null pointer dereference – new security bug for OpenSSL

#10

Post by cratermoon » Thu, May 01, 2014, 9:33 PM UTC

ticktocktick wrote: post #6

Are we better off using decoder rings and snail mail at this point?

http://en.wikipedia.org/wiki/Quipu maybe.