[tor-relays] NSA knew about Heartbleed
    Delton Barnes 
    delton.barnes at mail.ru
       
    Sat Apr 12 21:02:34 UTC 2014
    
    
  
Delton Barnes:
> That said, if you carefully parse the statement from DNI, it seems to me
> to imply they were aware of the Heartbleed vulnerability in 2014.  Why
> would they say "before 2014" instead of "before its disclosure Monday"
> or something?  They may have known about it weeks or months in advance,
> and been exploiting it or patching their systems.  But that is not as
> egregious as it would be to conceal this flaw for years.
Another statement I see now says they were not aware of the
vulnerability before "April 2014".  If true (which I believe it is) they
had at most about a week's foreknowledge.
    
    
More information about the tor-relays
mailing list