Agreed, but what should that mechanism be? My business runs on open-source software. Pretty much everything is behind our reverse proxy, Pound. One of the numerous libraries which Pound relies on is OpenSSL.
To whom do I give money? Debian? The applications I use like Apache and Pound? Do I enumerate all the libraries that all the applications use and give each of those hundreds of projects a few pennies?
They still have it.
I'm not following that. He describes in great detail how there's no way his private key was compromised. Why does he need to re-key?
No. The linked article doesn't say. I did click on a link to the company's blog from the linked article and found it. Such critical information should have been both in the page that
tl;dr: This took place AFTER the public disclosure, but not by much: it seems it was April 8th.
Was this before the public disclosure, or after?
Tom Wigley is one of the world's top climate scientists
That's damning with faint praise. It's springtime. The climate ninnies are out in full force.
Who the flip is Bennet Haselton and why is he allowed to have verbal diarrhea on Slashdot?
I know we aren't supposed to complain about lack of options, but
The difference between reality and unreality is that reality has so little to recommend it. -- Allan Sherman
