Re: [Haifux] The Heartbeat vulnerability in OpenSSL (and hence ssh/https)

2014-04-26 Thread ik
On Sat, Apr 26, 2014 at 2:20 PM, Sorana Fraier sf10...@gmail.com wrote: There is now a fork by openbsd people for openssl. It's called libressl. http://www.libressl.org/ Why a fork ?! There are bugs, some of them are set to be security risks, but you can never avoid bugs. And when C and C++

Re: [Haifux] The Heartbeat vulnerability in OpenSSL (and hence ssh/https)

2014-04-26 Thread Tzafrir Cohen
On Sat, Apr 26, 2014 at 02:20:17PM +0300, Sorana Fraier wrote: There is now a fork by openbsd people for openssl. It's called libressl. http://www.libressl.org/ They crave for more people to help. Not really. If they wanted more people they wouldn't use the OpenBSD CVS. This is the only