Delton Barnes: > That said, if you carefully parse the statement from DNI, it seems to me > to imply they were aware of the Heartbleed vulnerability in 2014. Why > would they say "before 2014" instead of "before its disclosure Monday" > or something? They may have known about it weeks or months in advance, > and been exploiting it or patching their systems. But that is not as > egregious as it would be to conceal this flaw for years.
Another statement I see now says they were not aware of the vulnerability before "April 2014". If true (which I believe it is) they had at most about a week's foreknowledge. _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays