Re: [[Infowarrior] - NSA Said to Have Used Heartbleed Bug for Years]

["Patrick W. Gilmore" <patrick () ianai net>]

On Apr 14, 2014, at 15:47 , Scott Howard <scott () doc net au> wrote:
> On Sun, Apr 13, 2014 at 9:52 AM, Niels Bakker <niels=nanog () bakker net>wrote:

> > At least one vendor, Akamai is helping out now:
> > http://marc.info/?l=openssl-users&m=139723710923076&w=2
> > I hope other vendors will follow suit.
>
>
> Although it appears they may now be regretting doing so...
>
> http://www.techworld.com.au/article/542813/akamai_admits_its_openssl_patch_faulty_reissues_keys/
>
> (Of course, the end result is positive, but...)

[NOTE: I'll just remind everyone up front that I worked at Akamai for a very long time, so take my comments with 
however many grains of salt you feel appropriate.]

If the only thing that happens when a large company steps up to help the open source community is ridicule and/or 
derision, one should probably not in the same breath ask why no companies are publishing any code.

I applaud Akamai for trying, for being courageous enough to post code, and for bucking the trend so many other 
companies are following by being more secretive every year.

Or we can flame anyone who tries, then wonder why no one is trying.

-- 
TTFN,
patrick

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail