[170966] in North American Network Operators' Group
Re: [[Infowarrior] - NSA Said to Have Used Heartbleed Bug for Years]
daemon@ATHENA.MIT.EDU (Patrick W. Gilmore)
Mon Apr 14 15:59:50 2014
From: "Patrick W. Gilmore" <patrick@ianai.net>
In-Reply-To: <CACnPsNU+EFxLUKbeBknsmqNMvZ0WN8RRE3CO-gmvN9qFAYNrhA@mail.gmail.com>
Date: Mon, 14 Apr 2014 15:59:21 -0400
To: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--Apple-Mail=_C6DDF4FF-E3FF-4674-B89C-4342054C02CF
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=iso-8859-1
On Apr 14, 2014, at 15:47 , Scott Howard <scott@doc.net.au> wrote:
> =08On Sun, Apr 13, 2014 at 9:52 AM, Niels Bakker =
<niels=3Dnanog@bakker.net>wrote:
>> At least one vendor, Akamai is helping out now:
>> http://marc.info/?l=3Dopenssl-users&m=3D139723710923076&w=3D2
>> I hope other vendors will follow suit.
>=20
>=20
> Although it appears they may now be regretting doing so...
>=20
> =
http://www.techworld.com.au/article/542813/akamai_admits_its_openssl_patch=
_faulty_reissues_keys/
>=20
> (Of course, the end result is positive, but...)
[NOTE: I'll just remind everyone up front that I worked at Akamai for a =
very long time, so take my comments with however many grains of salt you =
feel appropriate.]
If the only thing that happens when a large company steps up to help the =
open source community is ridicule and/or derision, one should probably =
not in the same breath ask why no companies are publishing any code.
I applaud Akamai for trying, for being courageous enough to post code, =
and for bucking the trend so many other companies are following by being =
more secretive every year.
Or we can flame anyone who tries, then wonder why no one is trying.
--=20
TTFN,
patrick
--Apple-Mail=_C6DDF4FF-E3FF-4674-B89C-4342054C02CF
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - http://gpgtools.org
iQEcBAEBAgAGBQJTTD4ZAAoJEHZX8udmu5TXKKsH/14TgMeZLurtX6SR/fhe+6YB
UGTlNSQG9EilPmCt5K2Nyi1t6NaBODSvFPrGSbjaJ9d2Vn9rWPy5LKlOCAdJ1n/w
QaD5TBFxtKvaA2SwgUuu0MbkxlhPF2K/Om+I8XAJaOI2zdQG/2bS6duyRrTBBiCJ
wK4ZUnTiYMTLWQHzvNIwjS2BglXxpA56GQ2qFqBZjn1bgA59pvynat9D6ZdZozYF
2b/WZEL+muaBJKS9rUZrDZGSGephMkZ7L5UrjvsfVsVPw3guA+1yYVH4CVhBuan2
iD6nMY5+cm85x2iD1QxkJR1y2cS+thm6MNyZC0H1V1t1/z8GBsA6i/+RTnqN3B4=
=NtIP
-----END PGP SIGNATURE-----
--Apple-Mail=_C6DDF4FF-E3FF-4674-B89C-4342054C02CF--
