> From: [email protected] [mailto:[email protected]]
> On Behalf Of Hazel
> 
> "The U.S. National Security Agency knew for at least two years about a flaw

Fact or not, it's irrelevant.  We all know flaws exist in all software.  
Sometimes the flaws are discovered by people who want to fix them for the 
public, and other times, they're kept secret.  Everybody on the planet would be 
naive to think anything *other* than every government intelligence agency on 
the planet maintains a secret database of known security flaws.  In addition to 
countless non-government organizations.

The operating assumption is that the NSA and everybody else maintains a 
database of these flaws, and whether or not heartbleed specifically was in the 
NSA list specifically, or MI6, or CSIS, or whoever... is just a specific detail 
in a huge list of similar details.  You have to assume they all know, about 
this and countless others.
_______________________________________________
Tech mailing list
[email protected]
https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to