Group items tagged

"Crucial open-source projects including OpenSSL will get at least $5.4 million in funding over three years. By Jared Newman, PC World | Security, openssl May 30, 2014, 10:40 AM - OpenSSL is getting funded for two full-time developers and a security audit in an attempt to prevent another devastating bug like Heartbleed. The money is coming from the Core Infrastructure Initiative (CII), a group of tech companies that came together last month in response to Heartbleed. At the time, CII said that each company would contribute at least $100,000 per year to crucial open-source projects over at least a three-year span, but the group didn't say how it would distribute the funds."

"Both the Heartbleed and Shellshock bugs were open-source flaws found in many Linux distributions, and both had the potential to impact OpenStack cloud users. Heartbleed is a flaw in the OpenSSL crytographic library for secure transport while Shellshock is a vulnerability in the Bash shell." [# ! At least... # ! … #OpenSource #community were #warned# ! and the #flaws were #solved…. among @ll. # ! #imagine how many flaws live in the #proprietary #closed #source# ! #unaware #users' #software…]

"Both the Heartbleed and Shellshock bugs were open-source flaws found in many Linux distributions, and both had the potential to impact OpenStack cloud users. Heartbleed is a flaw in the OpenSSL crytographic library for secure transport while Shellshock is a vulnerability in the Bash shell."

"NEWS ANALYSIS: In the year since Heartbleed's discovery, there is more scrutiny than ever on OpenSSL and critical infrastructure overall."

"NEWS ANALYSIS: In the year since Heartbleed's discovery, there is more scrutiny than ever on OpenSSL and critical infrastructure overall."

"Six months ago, when the Heartbleed bug threatened your bank account, your passwords, and your online life, people suddenly cared about OpenSSL, the open source version of crucial security standards that keep safe huge swathes of the internet. They wanted to know what it all meant and who was responsible for keeping them safe. (As it happens, the people most closely involved were two middle-aged guys called Steve.)" # ! #Geek #Power

"Six months ago, when the Heartbleed bug threatened your bank account, your passwords, and your online life, people suddenly cared about OpenSSL, the open source version of crucial security standards that keep safe huge swathes of the internet. They wanted to know what it all meant and who was responsible for keeping them safe. (As it happens, the people most closely involved were two middle-aged guys called Steve.)" # ! #Geek #Power

[ Innovation under Austerity This is a transcription of a speech given by Eben Moglen at the 2012 Freedom to Connect conference in Washington DC on May 22, 2012. Event records Transcription by Ben Asselstine. Thank you. it's a pleasure to be here, and to see so many friends. I'm very grateful to David for the invitation, it's a privilege to be here. I'm going to talk of mostly about a subject almost as geeky as stuff we all talk about all the time, namely political economy. I'm going to try and make it less snooze-worthy than it sometimes seems to be, but you'll forgive me I'm sure for starting fairly far from OpenSSL, and we'll get closer as time goes by. ...]