Re: [tor-relays] NSA knew about Heartbleed

[Delton Barnes <delton.barnes@xxxxxxx>]

Delton Barnes:
> That said, if you carefully parse the statement from DNI, it seems to me
> to imply they were aware of the Heartbleed vulnerability in 2014.  Why
> would they say "before 2014" instead of "before its disclosure Monday"
> or something?  They may have known about it weeks or months in advance,
> and been exploiting it or patching their systems.  But that is not as
> egregious as it would be to conceal this flaw for years.

Another statement I see now says they were not aware of the
vulnerability before "April 2014".  If true (which I believe it is) they
had at most about a week's foreknowledge.
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays