nanog mailing list archives

Re: [[Infowarrior] - NSA Said to Have Used Heartbleed Bug for Years]


From: Mark Seiden <mis () seiden com>
Date: Mon, 14 Apr 2014 08:55:01 -0700


On Apr 13, 2014, at 7:52 AM, Randy Bush <randy () psg com> wrote:

the point of open source is that the community is supposed to be doing
this.  we failed.
Versus all of the closed source bugs that nobody can know of or do 
anything about?

for those you can blame the vendor.  this one is owned by the community.
it falls on us to try to lower the probability of a next one by actively
auditing source as our civic duty.


is that kind of like jury duty?  if only it were more like literature, which
we could read for enjoyment.



randy


Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail


Current thread: