"As for Heartbleed, 'the mystery is not that a few overworked volunteers missed this bug', Marquess wrote. 'The mystery is why it hasn’t happened more often.'"
Couldn't agree more. I'm sure there's lots of folks now combing through every line of OpenSSL, trying to find some new 0-day.
A hard fork seems a good option. Fresh start, with no cruft or a bunch of legacy code. Painful, but positive.
Comments
"As for Heartbleed, 'the mystery is not that a few overworked volunteers missed this bug', Marquess wrote. 'The mystery is why it hasn’t happened more often.'"
Couldn't agree more. I'm sure there's lots of folks now combing through every line of OpenSSL, trying to find some new 0-day.
A hard fork seems a good option. Fresh start, with no cruft or a bunch of legacy code. Painful, but positive.