OS/2, eCS & ArcaOS - Technical > Web applications

'Heartbleed' vulnerability - OS/2 web server fixes

<< < (3/3)

Ian Manners:
Boris, without saying anything I will agree with what Greg Pringle has said.

I'm also not going to say what I'm ex of, and I'm not an American but I have done many things in my short life in varied fields.

Doug Bissett:

--- Quote from: Boris on April 25, 2014, 06:43:54 pm ---
--- Quote from: Greg Pringle on April 25, 2014, 01:37:57 pm ---I can tell you that all public encryption is vulnerable.
--- End quote ---
Proof or gtfo?
--- End quote ---

I fully agree with Greg. I will further state that it is not just "public" encryption that is vulnerable. All encryption, of every type, is vulnerable. The only variables are how easy it is to break it, and how easy it is to get your hands on the encrypted files. Having source code available can also make it easier, if the interested party can determine exactly how a file might be encrypted, or if there might be a hole in the code (which was apparently the case with 'Heartbleed').

FWIW, I couldn't care less what NSA finds. What worries me more, is what the criminals are finding. A bank account number, and password, is gold to them. Hackers can also cause problems, but they often just want to show what they can do.

dbanet:
Okay, I'm quitting this conversation  ;D

Navigation

[0] Message Index

[*] Previous page

Go to full version