The NSA of course denies doing any such damned thing. Of course, loyal Muricans should always believe what they say. Yeah, right.So the NSA's notion of patriotism when it finds a major vulnerability affecting many of the large internet services and their customers is to a) keep a lid on it, and b) exploit it.
I can't tell you what I think should be done with the NSA, but it may involve a corkscrew...
This is one of those things where, when we saw this headline at work today, everybody looked at it and said "How surprising." (As in, not).
ReplyDeleteSo now it's fixed. But never fear, I'm sure they introduced a *new* "bug" into OpenSSL while fixing the "old" bug. Sigh.
'Tux, I am old enough to remember when a bug was an unintentional flaw in the code. I am not quite old enough to have watched Amazing Grace's group scotch-tape the original bug (which was in fact a bug, which had crawled into a relay and fouled it) into the log book... but I'm almost that old. And I never thought I'd live to see the day when an American intelligence agency would premeditatedly foul the works of hardware and/or software on which both the American military and the American business community utterly depend. There's something not quite right... I don't mean morally, but practically... in the American government willfully, knowingly fucking over the American computing community.
Delete