what the shit is going on with the openssl audit? we were told "one month ago" nearly A YEAR AGO
@kennwhite AFAICT has been completely radio silent on it.
How would anybody here know?
>>62024245
My guess is they dug up a bunch of intentionally planted "bugs" that the NSA/CIA/whoever had installed and that they've been witholding the report until they can replace with fresh bugs
>>62024235
openssl has been the source of a predictable random number generator for ever. plus busted primes on top. don't expect it to ever change.