National Security & Defense

Eugene

(61,874 posts) Sun Apr 13, 2014, 02:36 PM Apr 2014

Heartbleed bug denial by NSA and White House

Source: BBC

12 April 2014 Last updated at 17:51 GMT

Heartbleed bug denial by NSA and White House

The US National Security Agency has denied it knew about or exploited the Heartbleed online security flaw.

The denial came after a Bloomberg News report alleging the NSA used the flaw in OpenSSL to harvest data.

OpenSSL is online-data scrambling software used to protect data such as passwords sent online.

Last year, NSA leaker Edward Snowden claimed the organisation deliberately introduced vulnerabilities to security software.

[font size=1]-snip-[/font]

4 replies

= new reply since forum marked as read

Highlight:

Heartbleed bug denial by NSA and White House (Original Post) Eugene Apr 2014 OP

Yeah - right. 840high Apr 2014 #1

I have a feeling this is one of those convuluted semantic non-denial/denials... hlthe2b Apr 2014 #2

It's entirely possible that they may be telling the truth. Maedhros Apr 2014 #3

The NSA has been sucking down every keystroke, every click that everybody has made and unhappycamper Apr 2014 #4

840high

(17,196 posts)

1. Yeah - right.

Reply to Eugene (Original post)

Sun Apr 13, 2014, 02:44 PM

Apr 2014

hlthe2b

(102,236 posts)

2. I have a feeling this is one of those convuluted semantic non-denial/denials...

Reply to Eugene (Original post)

Sun Apr 13, 2014, 03:34 PM

Apr 2014

I'd like to be wrong...

Maedhros

(10,007 posts)

3. It's entirely possible that they may be telling the truth.

Reply to Eugene (Original post)

Sun Apr 13, 2014, 03:44 PM

Apr 2014

However their past record of minimizing, ignoring, condoning or flat-out lying about previous abuses destroys their credibility.

unhappycamper

(60,364 posts)

4. The NSA has been sucking down every keystroke, every click that everybody has made and

Reply to Eugene (Original post)

Mon Apr 14, 2014, 07:59 AM

Apr 2014

saving it for over ten years. This particular bug was introduced into SSL communications in 2011.

If these hotshots can't find bugs, understand them AND GET THE FUCKING PROBLEM FIXED, why are they there? I was under the impression that they made us 'safe'. Allowing a bug that captures personal information doesn't made me feel very safe.

GET THE FUCKING PROBLEM FIXED = communicate the problem to the folks who caused it and have them fix it.

Reply to this discussion