Your Internet security relies on a few volunteers

http://money.cnn.com/2014/04/18/technology/security/heartbleed-volunteers/

 

OpenSSL was never meant to be used by everyone, but since it is free for everyone, they use it.
None of my banks nor my government used OpenSSL, so trying to be cheap does not pay off.

 

I really hope they do get some real donations after this.

edit

I found their donation page: https://www.openssl.org/support/donations.html

And here's a very few of the supporters: https://www.openssl.org/support/acknowledgments.html

I hate that mindset when it comes to free software. Free doesn't always mean junky.

 

This is the worst thing that has ever happened on the internet. Doesn't make me want to give them money.

 

But you know OpenSSL isn't going anywhere, nor are any of the other "free" alternatives: http://www.javaworld.com/article/21...rtbleed-4-openssl-alternatives-that-work.html

While it was a pain, I don't think Heartbleed was exploited in the 2 years it existed (less a snowden leak shows us otherwise). But it does make me wonder what other kinds of stuff remains exploitable which we'll find out years later.

 

Now that everybody found out what can be done by exploiting widely used software, there will be more eyes checking out similar software. IMO this is just the beginning.

 

In this case, this is bollocks. Most closed-source solutions used by most mediocre companies created by even more mediocre "consulting experts" are even worse, and they often contain buggy, statically-compiled crap with outdated versions of java and such, only no one really knows or cares, so they end up being sucky and buggy without news fanfare.

Cheers,
Mrk

 

OpenSSL and Linux: A Tale of Two Open-Source Projects

 

OpenSSL is going to get more funding now, see lotuseclat79's post here:
https://www.wilderssecurity.com/thr...erability-revealed.362411/page-9#post-2364925

http://arstechnica.com/information-...-by-heartbleed-finally-agree-to-fund-openssl/

 

Well some Canadians were arrested in relation to this.