http://www.nbcnews.com/tech/security/nsa-denies-it-used-heartbleed-bug-gather-intelligence-n78356
Well, well, well, NOW they’re getting more specific about what the “Heartbleed bug” actually is. Turns out, it’s a vulnerability in OpenSSL. You gotta be pretty stupid to use OpenSSL to log into a secure site. Like anything that is opensource, any joe schmo can go in there and put their own code leaving a backdoor open for them later. I don’t care if there is a peer-reviewed system in place. If all those supposed peers are crooked and corrupt, the entire system is already compromised. Such is the case with certain forum software (I won’t name names, but they have very sketchy behavior).
Thank goodness I never used OpenSSL (and I would never enable it if it came with any software). So I’m not too worried.
Fuck you, NSA. You guys need to stop playing games.
(OpenSSL is something the NSA would have created. But they’re claiming they didn’t. Do your research. Most of the encryption algorithms the entire Internet uses is written by NSA. Remember, NSA isn’t some righteous cream of the crop elite superhero group, they’re people, and people are flawed, crooked, corrupt, selfish, etc. Bad shit can happen and it does.)