In January 2014, in the midst of the NSA scandal, President Obama decided that the NSA must divulge any undisclosed flaws in Internet security that they were aware of. This means if the NSA is aware of software stack bugs like the recently discovered Heartbleed bug, they must publicly acknowledge the bug. But detractors have…
Tag: heartbleed
Heartbleed OpenSSL (SSL/TLS) vulnerability – analysis of a mind-blowingly simple bug
The OpenSSL encryption flaw, known as the Heartbleed bug, is being called one of the biggest security flaws ever seen on the Internet. One security analyst called it “catastrophic” and said that on a scale of 1 to 10, the vulnerability was an 11. The newly discovered vulnerability isn’t “big news” because of its complexity,…








