Today marks the 10th anniversary of the Heartbleed vulnerability in OpenSSL, which had the same ultimate root cause as recent XZUtils backdoor incident (optimizedbyotto.com)

submitted 7 months ago by otto@programming.dev to c/technology@lemmy.world

5 comments fedilink hide all child comments

The XZ Utils backdoor, discovered last week, and the Heartbleed security vulnerability ten years ago, share the same ultimate root cause. Both of them, and in fact all critical infrastructure open source projects, should be fixed with the same solution: ensure baseline funding for proper open source maintenance.

you are viewing a single comment's thread
view the rest of the comments

[-] Toes@ani.social -3 points 7 months ago

Isn't that why boringSSL was created? I wonder if we'll see corpo forks of openSSH soon

this post was submitted on 07 Apr 2024

24 points (66.7% liked)

Technology

59147 readers

2350 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS