film_girl, to random
@film_girl@mastodon.social avatar

Thinking a lot about the #xz backdoor this week. Almost exactly 10 years ago, I wrote this about the #Heartbleed attack and how we should do more to support #OSS, especially for important libraries. Sadly, almost all of what I wrote then is still relevant. https://web.archive.org/web/20140420132336/https://mashable.com/2014/04/14/heartbleed-open-source/

shaft, to random French
@shaft@piaille.fr avatar

À quelques jours près, la découverte du code malicieux de #xz coïncide avec la découverte de #HeartBleed avec 10 ans d'écart. 🥳

(J'ai l'impression que les choses n'ont pas tellement évoluée depuis 😓)

pluralistic, to random
@pluralistic@mamot.fr avatar

The crybabies who freak out about The Communist Manifesto appearing on university curriculum clearly never read it - chapter one is basically a long hymn to capitalism's flexibility and inventiveness, its ability to change form and adapt itself to everything the world throws at it and come out on top:

https://www.marxists.org/archive/marx/works/1848/communist-manifesto/ch01.htm#007

1/

pluralistic,
@pluralistic@mamot.fr avatar

But as open source projects have learned the hard way, the fact that anyone can audit your widely used, high-stakes code doesn't mean that anyone will.

The #Heartbleed vulnerability in #OpenSSL was a wake-up call for the open source movement - a bug that endangered every secure webserver connection in the world, which had hidden in plain sight for years.

36/

prime, to random

I was doing some research for an internal presentation and discovered that there is still over 200k Heartbleed vulnerable servers (according to Shodan). I am genuinely surprised.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • megavids
  • mdbf
  • thenastyranch
  • tacticalgear
  • khanakhh
  • Youngstown
  • rosin
  • slotface
  • everett
  • vwfavf
  • ngwrru68w68
  • kavyap
  • ethstaker
  • DreamBathrooms
  • Leos
  • magazineikmin
  • Durango
  • modclub
  • InstantRegret
  • osvaldo12
  • GTA5RPClips
  • normalnudes
  • anitta
  • cubers
  • tester
  • cisconetworking
  • provamag3
  • JUstTest
  • All magazines