NSA Said to Exploit Heartbleed Bug for Intelligence for Years

master_shake_

Diamond Member
May 22, 2012
6,425
291
121
The U.S. National Security Agency knew for at least two years about a flaw in the way that many websites send sensitive information, now dubbed the Heartbleed bug, and regularly used it to gather critical intelligence, two people familiar with the matter said.
The NSA’s decision to keep the bug secret in pursuit of national security interests threatens to renew the rancorous debate over the role of the government’s top computer experts.

screw security, we're looking for terrists /'murica.
 

Jaskalas

Lifer
Jun 23, 2004
35,011
9,116
136
If the NSA were the ones to know and exploit it for the "years" it was available, then it stands to reason they are directly responsible for its creation.

Even if their direct creation of it is not proven, they knew of a gaping hole in the internet and did not warn to protect people from it. End that agency. SHUT IT DOWN!
 

Moonbeam

Elite Member
Nov 24, 1999
74,040
6,600
126
If the NSA were the ones to know and exploit it for the "years" it was available, then it stands to reason they are directly responsible for its creation.

Even if their direct creation of it is not proven, they knew of a gaping hole in the internet and did not warn to protect people from it. End that agency. SHUT IT DOWN!

You used the word if as if you knew what it means.
 

Kadarin

Lifer
Nov 23, 2001
44,296
16
81
And they still missed the Boston Marathon bombers. Whatever they're doing, they're not looking for terrorists.
 

ForumMaster

Diamond Member
Feb 24, 2005
7,792
1
0
I'm not taking sides here on whether the NSA did or did not know of the bug in question, but keep in mind that any reporter can write an article saying they did, and poof everyone believes them.

Not on single bit of proof. The NSA denies it. While I don't expect them to admit if it was true, can you prove any of it? An Edward Snowden document? Anything? Thought so.
 

WHAMPOM

Diamond Member
Feb 28, 2006
7,628
183
106
A backdoor in an internet security feature that looks like it was "built in" may actually have been built in.
 

cubby1223

Lifer
May 24, 2004
13,518
42
86
A backdoor in an internet security feature that looks like it was "built in" may actually have been built in.

It may have been, it may not have been.

The point is an unsourced paragraph citing unnamed sources is not sufficient to form an opinion from, and certainly not sufficient to warrant a thread dedicated to it.
 

exdeath

Lifer
Jan 29, 2004
13,679
10
81
If the NSA were the ones to know and exploit it for the "years" it was available, then it stands to reason they are directly responsible for its creation.

Even if their direct creation of it is not proven, they knew of a gaping hole in the internet and did not warn to protect people from it. End that agency. SHUT IT DOWN!

Hackers don't create exploits. Software authors do.