Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Personally I have a hard time to trust anything after heart bleed. A very basic attack that caused havoc. It proved that the quality of open source is nowhere close to the promises of OSS.

Heartbleed made international headlines, and got fixed very quickly. The equivalent bugs in Mike's Proprietary Encryption Layer are just another Tuesday. Which is better: being able to discover a bug like Heartbleed, or not being able to discover a bug like Heartbleed?



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: