Slashdot Mirror

← Back to Stories (view on slashdot.org)

OpenSSL To Undergo Security Audit, Gets Cash For 2 Developers

Posted by timothy on from the can-we-send-them-snacks? dept.

Trailrunner7 (1100399) writes "Scarcely a month after announcing the formation of a group designed to help fund open source projects, the Core Infrastructure Initiative has decided to provide the OpenSSL Project with enough money to hire two full-time developers and also will fund an audit of OpenSSL by the Open Crypto Audit Project. The CII is backed by a who's who of tech companies, including Google, Microsoft, IBM, the Linux Foundation, Facebook and Amazon, and the group added a number of new members this week, as well. Adobe, Bloomberg, HP Huawei and Salesforce.com have joined the CII and will provide financial backing. Now, the OCAP team, which includes Johns Hopkins professor and cryptographer Matthew Green, will have the money to fund an audit of OpenSSL, as well. OpenSSL took a major hit earlier this year with the revelation of the Heartbleed vulnerability, which sent the Internet into a panic, as the software runs on more than 60 percent of SSL-protected sites."

86 of 132 comments (clear)

  1. Why bother? by Anonymous Coward · · Score: 5, Insightful

    The whole security model is broken. How many CAs does your browser come with these days? Do you even know? How do you know they haven't already turned over their CA signing keys to 7 different governments?

    There's no way to "fix" openssl. The entire thing is predicated on a false premise.

    1. Re:Why bother? by Anonymous Coward · · Score: 1

      Blockchain certificate authority might fix that

      http://www.theregister.co.uk/2013/11/03/crypto_boffins_propose_getting_rid_of_cas/

    2. Re:Why bother? by NotInHere · · Score: 1

      Yeah I like to download 10 GB of binary before I can visit webpages. Especially on my smartphone.

    3. Re:Why bother? by Imagix · · Score: 5, Insightful

      Yet again, another person who can't distinguish between the technology and a particular application of that technology. What you're complaining about has nothing to do with the implementation of OpenSSL (which is what this article is about), but has to do with the application of OpenSSL. OpenSSL is doing it's job by verifying the presented certificates against the list of trusted certificate authorities that you have configured. The fact that you're trusting too many people isn't a problem with OpenSSL. (It is also not OpenSSL's concern as to how you obtained your list of trusted CAs, only that you have one.)

    4. Re:Why bother? by Anonymous Coward · · Score: 1

      The whole security model is broken. How many CAs does your browser come with these days? Do you even know? How do you know they haven't already turned over their CA signing keys to 7 different governments?

      There's no way to "fix" openssl. The entire thing is predicated on a false premise.

      Your extreme cynicism may lead to dementia.

    5. Re:Why bother? by jrumney · · Score: 2

      How many CAs does your browser come with these days?

      Browsers have come with far too many CAs installed for many years now.

    6. Re:Why bother? by Jawnn · · Score: 1

      The whole security model is broken. How many CAs does your browser come with these days? Do you even know? How do you know they haven't already turned over their CA signing keys to 7 different governments?

      There's no way to "fix" openssl. The entire thing is predicated on a false premise.

      OK, Moxie. We get the message. You aren't fooling anyone with the AC post, dude.

    7. Re:Why bother? by WaffleMonster · · Score: 2

      The whole security model is broken. How many CAs does your browser come with these days? Do you even know? How do you know they haven't already turned over their CA signing keys to 7 different governments?

      There's no way to "fix" openssl. The entire thing is predicated on a false premise.

      Nothing in OpenSSL forces you to trust any CA's you don't want to trust. Heck you don't even have to use certificates at all (TLS-PSK, TLS-SRP)

      I think it is a mistake to confuse deployment failures with implementation failures with specification failure.. while there are often linkages between these things it is hard to accept that proliferation of hundreds of CA's all with overlapping global scope is anything but a deployment failure.

    8. Re:Why bother? by Anonymous Coward · · Score: 1

      Yet again, another person who can't distinguish between the technology and a particular application of that technolog........

      Typical engineer bullshit. We always hear how the users are to blame. Sorry; the people who design the interface which enforces this single CA stupidity are to blame for the fundamental security failures of SSL. Long before SSL was released in 1995, PGP had been released (1991!!!) with a public key based web of trust. SSL deliberately chose to ignore that. If we had been able to insist on multiple CAs per site or prioritize CAs and put more trust towards ones that were worthy and independent of governments then there would be nothing like the mess there is today.

      SSL and the entire CA system is directly and striaghtforwardly to blame. Anyone who implements SSL without building in the possibility of an additional authentication layer on top of the plan CA is knowingly and deliberately building an insecure system.

      Please, LibreSSL people, include an ability to interface via tor with the EFF's certificate checking. Please provide a mechanism for saying that one CA is more trustworthy than another. Please allow us to demand two certificates for one site. Then we have a chance to be safe.

    9. Re:Why bother? by g4sy · · Score: 2

      You're right. Nice post, you sent me on a dig around ddg. Would this be a work around? It's a browser plugin that uses GPG web of trust to check certificates peer to peer. I don't know if this plugin actually works, but I think the idea is brilliant!

      Monkey Sphere

      --
      somewhere, on a Big Red Sign:
      if(color==blue){speed--;}
    10. Re:Why bother? by petermgreen · · Score: 2

      I'd say the horrendous state of ssl certiciate security has aspects in all three categories.

      Specification failure: Certificates can only be signed by a single CA, no mechanism for multiple signatures on a cert to give a greater assurance level. No mechanism to limit a CA to a subset of the dns heirachy.
      Implementation failure: Major implementations include an insane default CA list*, poor handling of certificates of different trust levels (clever use of redirects can allow interception of form data for an EV site without making the green bar disappear)
      Deployment failure: noone looks at the list of CAs and makes an informed descion on what to accept, they just leave it at the software vendors defaults.

      but yeah none of these are openssl's fault. By the time they came along the bad descisions had already been made.

      * Seriously mozilla why the heck did you include the chineese government.

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
  2. Too little too late? by QuietLagoon · · Score: 1
    Looks like a committee of tech companies is going to fund a security audit and further development of OpenSSL.

    .
    This can only be a good thing, right?

    1. Re:Too little too late? by mmell · · Score: 2
      Let's just bear in mind the old saying, "A camel is a horse designed by committee."

      Hiring two fulltime dedicated programmers? Seems like a good thing to me.

      Submitting their work to a separate entity for auditing and verification? Sounds like a good thing to me.

      As long as the various business entities involved in the auditing stick to that mandate and don't start trying to directly influence the development or design of OpenSSL, it all sounds good to me. Otherwise, we're likely to end up with CDE, the Common Desktop Environment.

    2. Re:Too little too late? by Eunuchswear · · Score: 1

      Let's just bear in mind the old saying, "A camel is a horse designed by committee."

      Which would you rather have in a desert? That comittee must have been pretty good.

      --
      Watch this Heartland Institute video
    3. Re:Too little too late? by arth1 · · Score: 1

      They also handle snow and winter a lot better. Bactrian camels can easily survive several days long snowstorms outdoors - conditions that would kill the sturdiest horses.

      But back on topic, what's worse if the animal is designed by marketing. Then you end up with a duckbilled platypus. It may be feature rich, but it can't do the job of a horse (or camel).

  3. Share and Share Alike by just_another_sean · · Score: 4, Insightful

    While I applaud the efforts and support I do hope that the work of others will not be ignored. The audit is great news, but I do hope the existing and new developers will look to LibreSSL for code updates, ideas and their own audit results. If we can get a nice bidirectional and completely cooperative flow between the two projects than hopefully the final result will be a highly secured, audited product that we can all use.

    --
    Creationist Textbook Stickers Declared Unconstitutional by CowboyNeal
    1. Re:Share and Share Alike by _Shad0w_ · · Score: 2

      The problem with OpenSSL Rampage is that a major part of their approach is basically to rip everything out of OpenSSL that isn't relevant to OpenBSD, which is generally the code relevant to platforms OpenSSL supports but OpenBSD doesn't.

      --

      Yeah, I had a sig once; I got bored of it.

    2. Re:Share and Share Alike by just_another_sean · · Score: 1

      At first glance I agree and that is essentially what they are doing. But I do believe (can't find a link to back me up but can swear I read it somewhere) that the idea is to make LibreSSL as secure and robust as possible for OpenBSD and then start porting it to other systems, with the exceptions of course being Windows 3.1, VMS, etc. This makes sense to me; start with a known good reference implementation that uses as much of the old code as possible, just heavily cleaned up and then move on to porting (reporting? :-)

      And even if Theo and crew don't port it themselves I would pretty much bank on the fact that, say, someone at Debian will take the BSD code and port it to Linux - it's not as if OpenBSD will have a problem with this. My understanding is that they are pretty helpful in these situations (Theo's occasional rants aside) with regards to helping other developers port their stuff to other platforms. And if some decide to use the cleaned up OpenSSL code this article refers to and some end up with a Libre based solution that would be a good thing, as long as the API's and end products are consistent. Two FOSS solutions breeds competition and spurs cross pollination of various innovations and bug fixes.

      --
      Creationist Textbook Stickers Declared Unconstitutional by CowboyNeal
    3. Re:Share and Share Alike by petermgreen · · Score: 1

      And even if Theo and crew don't port it themselves I would pretty much bank on the fact that, say, someone at Debian will take the BSD code and port it to Linux - it's not as if OpenBSD will have a problem with this.

      The problem with crypto is it's really easy to end up with something that works but isn't secure.

      Libressl and openssl take different approaches. Openssl's appoach is to rely on the OS as little as possible. Libressl is targetted at openbsd and relies heavilly on library features provided by openbsd.

      http://insanecoding.blogspot.n...
      http://insanecoding.blogspot.n...

      If and when there is a linux port of libressl that is blessed by the libressl team then it might be worth considering but a bad port of libressl could easilly end up being a lot worse than openssl.

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    4. Re:Share and Share Alike by just_another_sean · · Score: 1

      Agreed, it doesn't take much to fuck up security in an effort to make it easier. The road to hell and all that. I still cringe a little every time I have to install openssh-blacklist on Debian but in the end I think it's helpful that they are identifying the pieces that rely on specific OS and/or hardware support. By isolating these pieces for BSD they only make it easier to identify the missing bits in other OS's. Do we really need OpenSSL support for Windows 3.1? VMS? Start with the most obvious needs (Modern Windows, the Linux Kernel on various hardware architectures, the BSDs and Mac OSX (covered by the BSDs already?)) and we're 98% of the way there...

      --
      Creationist Textbook Stickers Declared Unconstitutional by CowboyNeal
    5. Re:Share and Share Alike by Forever+Wondering · · Score: 1

      In another comment, I posted a link to the talk that the libreSSL people gave on what they're doing. It's not really true that what they come up with won't run on other platforms. They're just removing a ton of "#if defined(OPENVMS) && (! defined(WIN32))" in favor of assuming a POSIX compliant libc. Even WinX now has that.

      They're taking the "shim" approach. For example, they have two BSD-only functions: explicit_bzero [will _not_ be optimized away by the compiler--just calls bzero] and arrayalloc [does what calloc does but does _not_ zero the memory].

      The BSD calloc/arrayalloc do a precheck for overflow of nmemb * size.

      These are easy [trivial] to implement for non BSD systems:
      void
      explicit_bzero(void *ptr,size_t len)
      {
          memset(ptr,0,len);
      }
      void *
      arrayalloc(size_t nmemb,size_t size)
      {
          size_t totsize;
          void *ptr;

          totsize = nmemb * size;
          if (/* totsize overflowed*/) // blow up ...

          ptr = malloc(totsize);

          return ptr;
      }

      --
      Like a good neighbor, fsck is there ...
  4. "Audit"? Try massive rewrite. by rbrander · · Score: 5, Insightful

    The comments from the folks who started LibreSSL at a meeting of the Calgary Unix Users Group the other night were beyond scathing. Bob Beck's first slide shows Laura Dern in Jurassic Park, up to her elbows in stegasaurus dung, as a metaphor for what the first skim of the code felt like. It's a hopelessly overpatched mess of spaghetti code and #IFNDEF mazes that nobody can really maintain. Their fork has already tossed out tens of thousands of lines of code and started again. (Another slide shows the line from Aliens: "Nuke it from orbit. It's the only way to be sure").

    If not a from-scratch rewrite, think of a home reno where you have to strip it to the frame and put up new drywalls.
    And this situation was allowed to grow by the current bunch that manage OpenSSL; they're only doing this at all because one of the hundreds of time-bombs in the code finally went off, and anybody who's looked it knows how many hundreds more there are. For shame.

    There's a link to the slides from the libressl.org site, which is very minimal, as they say "We're too busy deleting code to make web pages".

    It was just a very sobering presentation. To think we let so much depend on a pile of cruft.

  5. wrong direction. by nimbius · · Score: 5, Insightful

    http://www.libressl.org/

    seriously pumping openssl full of cash at this point is like buying new deck chairs for the titanic.

    --
    Good people go to bed earlier.
    1. Re:wrong direction. by Himmy32 · · Score: 1

      If someone's willing to give the money to make it better, I won't complain. Good options are better than no options. I wish the best of luck to both teams.

    2. Re:wrong direction. by colfer · · Score: 3, Insightful

      The big companies probably want more control over the project than LibreSSL will allow them. They've been burned once by relying on old-style Unix community dev. But it's also entirely their own fault for not funding and auditing the open source code they were building their billions on.

      Seems to me LibreSSL is the way to go, but I can also see why the corporations would just use it as a side-stream for hints on what to fix. They have enough resources to rewrite openSSL from the inside rather than the the LibreSSL tear-down approach. Having both projects is really a benefit for LibreSSL as longs as it gets sufficient interest and resources.

    3. Re:wrong direction. by iggymanz · · Score: 2

      seems to me it was old fashioned corporate greed and rubberstamping that burned them. openssl foundation just doing FIPS consulting gigs for $1M /year

    4. Re:wrong direction. by canadiannomad · · Score: 1

      Yeah, been reading OpenSSL Valhalla Rampage
        Once it is released in Linux, I'm definitely switching.

      --
      Hmm, the humour and sarcasm seem to have been be lost on you.
    5. Re:wrong direction. by RR · · Score: 1

      Seems to me LibreSSL is the way to go, but I can also see why the corporations would just use it as a side-stream for hints on what to fix. They have enough resources to rewrite openSSL from the inside rather than the the LibreSSL tear-down approach.

      I don't think companies really "have enough resources" to rewrite OpenSSL. The problem is that you can't just throw money at a project and have stuff happen. You need people to implement those changes. And we're still in the clutches of the software crisis.

      The problem with OpenSSL is that it is really, really bad code. It's security code, which few people have the expertise to handle. It has an idiosyncratic style, which few people want to look at, it's so painful. And it is so littered with backwards compatibility hacks and defective functions that very few people can know whether it's doing something right. Even the OpenSSL people don't know what it's doing, given all the comments about OpenSSL functions that they're not using properly.

      So, best of luck to the CII, trying to "improve" OpenSSL without getting rid of all its weirdness. I think the OpenBSD people are right, and they should just tear down everything and rebuild it.

      --
      Have a nice time.
    6. Re:wrong direction. by WaffleMonster · · Score: 1

      seriously pumping openssl full of cash at this point is like buying new deck chairs for the titanic.

      It is great to see interest in improving OpenSSL yet bug fixes and deletion of compatibility layers in my opinion is in much the same category as purchase of new deck chairs.

      If "we" were serious we would re-architect it from scratch to be secure by design... endeavor in which nobody is currently publically known to be engaged. I hope one or both of the teams seriously considers it. I also hope "dino dung" bravado is replaced with realization everyone is on the same side.

    7. Re:wrong direction. by garyebickford · · Score: 1

      I like the idea of the "improve" strategy for OpenSSL, in addition to LibreSSL. This is the advantage of open source. I expect that each project will benefit from the perspective of the other, and as OSS projects they will hopefully cooperate to assure that the libraries interoperate. In the long run, it's not unlikely that the two will re-merge. The OpenBSD folks seem less inclined to that historically, but there are a number of projects where that has occurred - Compiz and Beryl come to mind. So these two projects could be an example of the benefits of the OSS model.

      --
      It's easier to be a result of the past, but more fun to be a cause of the future! http://www.spacefinancegroup.com/
    8. Re:wrong direction. by garyebickford · · Score: 1

      After seeing your note, I did a bit of searching and could not find anything significant. The only issues were those raised by Brad Knowles in 2004, which IMO were adequately addressed by the OpenNTPD folks shortly thereafter. I did not find anything else except for a bug found in Debian in 2007. The BSD team's responses noted that the purpose of OpenNTPD was not to be a complete clone of the original, but to be sufficient for most uses with security and cleanliness as the primary goals. In that context, some of the more complex and rarely used features were not considered worth inclusion, at least at the time when the project was only a few months old.

      So, can you expand on your assertion? (Hmm. I see now the above was an AC comment.)

      --
      It's easier to be a result of the past, but more fun to be a cause of the future! http://www.spacefinancegroup.com/
  6. LibreSSL For Me by Anonymous Coward · · Score: 3, Insightful

    Two developers added to an already crummy project? Ha! I'll send my money to the OpenBSD project, instead. OpenSSH and pf are just two examples of how they got the job done when outside projects fail to deliver. They'll do the same with LibreSSL, and in a year most everybody will have switched.

    Send the OpenBSD project some money: http://www.openbsdfoundation.org/

    1. Re:LibreSSL For Me by just_another_sean · · Score: 1

      Yes, do please contribute. And if you simply don't want to give your money to them at least go buy a CD or coffee mug. Every little bit helps!

      --
      Creationist Textbook Stickers Declared Unconstitutional by CowboyNeal
  7. Something needs to change by Anonymous Coward · · Score: 1

    Two developers for a core piece of software used by nearly the entire network industry. Hooray!! (slow sarcastic clap)

    That's chump change for the big organizations involved. That's less than chump change. It wouldn't even catch the eye of brain dead bottom line accountant. It's probably tax deductible too.

    Something needs to change.

    1. Re:Something needs to change by genx76 · · Score: 1

      It's probably tax deductible too.

      Supposing they did not escape all taxes yet.

    2. Re:Something needs to change by Anonymous Coward · · Score: 1

      Supposing they did not escape all taxes yet.

      Take off your tinfoil hat. Stop spreading the myth that these companies don't pay taxes. If they didn't, the IRS would be all over them.

    3. Re:Something needs to change by Anonymous Coward · · Score: 1

      Take off your tinfoil hat. Stop spreading the myth that these companies don't pay taxes. If they didn't, the IRS would be all over them.

      The point of comments like that is not that these companies don't pay all taxes required by law, but that current tax laws & tax treaties with foreign jurisdictions allow you to create corporate structures like the double Irish Dutch sandwich which effectively pay no tax at all.

    4. Re:Something needs to change by atomic-penguin · · Score: 1

      It's probably tax deductible too.

      No, the OpenSSL foundation is a for-profit consultancy whose primary business purpose is US government FIPS support contracts.

      --
      /^([Ss]ame [Bb]at (time, |channel.)){2}$/
    5. Re:Something needs to change by jones_supa · · Score: 1

      Sure it is used by a lot of people... However it doesn't mean that you need a million eyes looking at it. OpenSSL while necessary, isn't a big program.

      Almost every Unix/Linux command line user uses the cat command. How many people do you think you will need to review that?

      You have no idea what you are talking about.

      Makes me think if you have browsed the source code of any UNIX program?

  8. Re:OpenSSL and what else. by atomic-penguin · · Score: 5, Informative

    The issue that I find, is that OpenSSL is the only Open Source Player out there.

    But It is not the only SSL/TLS game in town. There is also GnuTLS and Network Security Services (NSS).

    --
    /^([Ss]ame [Bb]at (time, |channel.)){2}$/
  9. Darn it all to heck by philip.paradis · · Score: 1

    Given the fact that projects like this have a tendency to shut down in the middle of security audits, it must be curtains for OpenSSL. Just look at what happened to TrueCrypt!

    .
    .
    .
    pst, it's a joke
    .
    .
    .

    --
    Write failed: Broken pipe
  10. One big mistake? by Anonymous Coward · · Score: 1

    This is not one big mistake. It's a series of inept decisions about maintainability and auditability that finally culminated in "one big mistake". (Which, btw, probably cost on the order of at least 10M$ in wasted time.)

    The problem was not so much the big mistake itself, but the culture and attitude that lead to it.

    1. Re:One big mistake? by cant_get_a_good_nick · · Score: 2

      order of at least 10M$ in wasted time

      Why are more and more people putting the dollar sign on the right?

      I've been on Slashdot too much, i read it as "10 Micro$softs of wasted time"

  11. Kill it with fire by EmperorOfCanada · · Score: 3, Funny

    Why give these guys money? Start afresh like the BSD guys are doing. I suspect they don't want to lose their juicy consulting gigs.

  12. Re:OpenSSL and what else. by monkeyhybrid · · Score: 4, Informative

    There are alternatives, although I can't comment on how they compare with OpenSSL.

    GnuTLS (LGPLv2.1)

    Mozilla Network Security Services (Mozilla Public License)

    PolarSSL (GPL2 and proprietary).

    MatrixSSL (GPL and proprietary

  13. I dont trust it anymore by Anonymous Coward · · Score: 1

    Question: Why spend money and resources on OpenSSL when you can spend it on LibreSSL?

    Question: Is OpenSSL currently useful for intelligence agencies?

    Question: Can the same be said for LibreSSL when it is done?

  14. no credibility by iggymanz · · Score: 2

    the fact that these companies haven't even addresses the other MASSIVE flaw with openssl (which the OpenBSD team has dealt with already) shows they have no grasp of the issues

    1. Re:no credibility by Anonymous Coward · · Score: 1

      Support for RSA and ECC accelerators? They dealt with that. Gone.
      Support for symmetric crypto accelerators? They dealt with that. Gone.
      Vectorized C and ASM cipher implementations? They dealt with that. Gone.
      Portability to *anything* not OpenBSD? They dealt with that, too.

      LibreSSL - "how to turn a crusty SSL library into a academic toy"

    2. Re: no credibility by Anonymous Coward · · Score: 1

      The accelerators are still there. They just use OpenBSD's unified /dev/crypto interface. In fact, for years OpenBSD's OpenSSL was the only one that did HW acceleration out-of-the-box and with no configuration except a single sysctl.conf option.

    3. Re:no credibility by iggymanz · · Score: 1

      nonsense, it was the openssl code that had crufty incorrect methodology for being "portable", #ifdef hell and a contrived c dialect.

      The openbsd team's changes are making the code easily portable just as openssh and their other major projects are, and after building the openbsd version they'll then focus on the portable version

  15. Re:OpenSSL and what else. by jellomizer · · Score: 2

    In Ubuntu or Debain... Can you Apt-get Apache to use these instead?

    Actually that is a serious question. I never saw those as an option.

    --
    If something is so important that you feel the need to post it on the internet... It probably isn't that important.
  16. Re:"Audit"? Try massive rewrite. by QuietLagoon · · Score: 4, Insightful

    ...Humans make mistakes. Clever people make just as many mistakes....

    You left out the part about clever people not continuing to make the same mistakes over and over.

    .
    The problem with OpenSSL is not that mistakes were made.

    The problem is that mistakes were made and the developers did not learn from those mistakes, did not seem to care about fixing those mistakes, and did not care about preventing similar mistakes from recurring.

  17. Re:"Audit"? Try massive rewrite. by drinkypoo · · Score: 1

    Humans make mistakes. Clever people make just as many mistakes. Occasionally they make huge, multiple-death causing mistakes

    That's not what happened here. This was making a mistake, then instead of addressing it, building someone on top of it, and making a mistake in that, and then rather than addressing it, and so on ad infinitum.

    One big mistake is not a reason to scorch and salt the earth.

    Good thing that's not what is happening.

    Good thing you didn't log in, you wouldn't want that kind of bullshit associated with a name.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  18. Re:"Audit"? Try massive rewrite. by sconeu · · Score: 1

    I recently had reason to look at the hashing code. It's all written in f**ing macros.

    --
    General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
  19. Re:OpenSSL and what else. by Number42 · · Score: 2

    And Apple's SSL.

  20. Security audit?!! by Java+Pimp · · Score: 1

    I hope they don't shut the project down... abruptly and without warning...

    --
    Ascalante: Your bride is over 3,000 years old.
    Kull: She told me she was 19!
    1. Re:Security audit?!! by cpghost · · Score: 1

      I hope they don't shut the project down... abruptly and without warning...

      You mean with warning... not to use OpenSSL, but rely on Microsoft's NSA-infested crypto-libraries like TrueCrypt did with its BitLocker recommendation?

      --
      cpghost at Cordula's Web.
  21. Namecoin in client-server mode by tepples · · Score: 1

    The system described in the article that AC's comment cites sounds like Namecoin. Like a full Bitcoin client, a full Namecoin client would be impractical on a mobile phone. But like Bitcoin with online wallets, Namecoin would allow third parties to run resolvers. So ideally, you could point your mobile browser to a resolver running on the VPS of someone you trust.

    1. Re:Namecoin in client-server mode by NotInHere · · Score: 3, Informative

      Already now I have the trusted third party option. Moxie has started a service offering this: http://convergence.io/

    2. Re:Namecoin in client-server mode by BitZtream · · Score: 1

      Yea, running your PKI infrastructure on a VPS is always the way to go, makes total sense since you're not trusting other third parties to verify things that you would trust a third party to provide you with a virtual instance to run it on ...

      Do you even understand how a VPS or VM work?

      --
      Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
  22. Re:OpenSSL and what else. by atomic-penguin · · Score: 1

    I don't have an Ubuntu/Debian box at my disposal at the moment.

    You could try

    apt-cache search mod_nss

    or

    apt_cache search mod_gnutls

    though. It would probably be named some variant of that.

    --
    /^([Ss]ame [Bb]at (time, |channel.)){2}$/
  23. Re:"Audit"? Try massive rewrite. by psergiu · · Score: 2

    > ... One big mistake is not a reason to scorch and salt the earth.

    Listen, lad. I've built this kingdom up from nothing. When I started here, all there was was swamp. All the kings said I was daft to build a castle in a swamp, but I built it all the same, just to show 'em. It sank into the swamp. So, I built a second one. That sank into the swamp. So I built a third one. That burned down, fell over, then sank into the swamp. But the fourth one stayed up.
    An' that's what your gonna get, lad -- the strongest castle in these islands.

    --
    1% APY, No fees, Online Bank https://captl1.co/2uIErYq Don't let your $$$ sit in a no-interest acct.
  24. I'm thinking of other acronyms by ThatsNotPudding · · Score: 1

    Whoever is hired to fix OpenSSL will instantly receive an NSL to STFU and put in an NSA backdoor.

    1. Re: I'm thinking of other acronyms by jd2112 · · Score: 1

      And that differs from libreSSL in what way?

      --
      Any insufficiently advanced magic is indistinguishable from technology.
  25. Re:OpenSSL and what else. Umm...LibreSSL by denis-The-menace · · Score: 3

    FYI: LibreSSL is a fork of OpenSSL that started over a month ago.
    http://www.libressl.org/ [libressl.org]

    --
    Obama's legacy: (N)othing (S)ecure (A)nywhere and (T)error (S)imulation (A)dministration
  26. What attack? by tepples · · Score: 1

    A virtual machine runs a PC operating system of the customer's choice in a sandbox, and the server provides services from inside that sandbox through an Internet connection. Are there documented cases of VPS operators injecting malware into such a sandbox?

    1. Re:What attack? by Anonymous Coward · · Score: 1

      Are there documented cases of VPS operators injecting malware into such a sandbox?

      There are indeed examples of both "break out" and "break in" attacks for various types of hypervisors, although very little evidence of anyone exploiting them. Then again, there was very little evidence of the stuff the NSA & GCHQ have been doing, so I won't assume they're not being actively exploited by someone.

  27. Re:"Audit"? Try massive rewrite. by Wootery · · Score: 3, Insightful

    The problem is that mistakes were made and the developers did not learn from those mistakes, did not seem to care about fixing those mistakes, and did not care about preventing similar mistakes from recurring.

    To play Devil's advocate (or rather, advocate of the developers): if they were a properly resources software-development team, they might have been better able to pay off the technical-debt accumulating in the codebase. Hopefully this injection of resources will change things for the better. (The LibreSSL crew seem to be making good progress on the technical debt front, also.)

  28. Re:"Audit"? Try massive rewrite. by Wootery · · Score: 2

    Meanwhile, in Git's crypto code.

    (Linked from this blog entry.)

  29. would you rather have inline assembly? by Chirs · · Score: 2

    By writing it in macros the code is moderately human-readable, while giving the performance benefits of actually being written in assembly. By doing it that way the compiler also has the opportunity to optimize the assembly somewhat.

    1. Re:would you rather have inline assembly? by Tough+Love · · Score: 1

      The C macro is a form of computer life that ranks several rungs below C++ templates on the evolutionary scale, somewhere below the common louse and just above slime mold.

      --
      When all you have is a hammer, every problem starts to look like a thumb.
  30. not a crypto problem by Gothmolly · · Score: 1

    So don't bring in cryptographers. Heartbleed was a bonehead entry level programming error based on some arguably foolish decision about performance improvements. Read the code cleanup comments at libressl.org.

    --
    I want to delete my account but Slashdot doesn't allow it.
  31. Re:"Audit"? Try massive rewrite. by cant_get_a_good_nick · · Score: 2

    I saw those slides. There were 17 levels of #ifdefs in the code. Every ifdef is a binary switch, which means 2^17 different iterations of source code.(!!!!!) That's 131072 different compiles (!!!!!!).

    So, lets pretend that a config/make sequence just needs 10 minutes (unlikely, they have an oddball config script that isn't like autoconf). To hit 17 levels of ifdef, you'd need approx 910 computer-days just to do all the compiles. Do you think they tested this matrix?

    I hate to beat up on a bunch of people who did hard work for free, but they really did a bad job on a lot of things.

  32. Re:OpenSSL and what else. by WaffleMonster · · Score: 1

    The issue that I find, is that OpenSSL is the only Open Source Player out there.
    Much like File Systems, we really should have at least a few popular choices, which are interchangeable. So if there is a security problem with one we can switch to an other one.

    Several SSL implementations support the OpenSSL API including GnuTLS (open source)

    NSS is also open source with shims available to help those porting from OpenSSL.

    Having never used them I can't vouch for how useful they are in the real world... assume out of total ignorance they are worthless for anything but the basic SSL_* operations.

  33. Re:"Audit"? Try massive rewrite. by WaffleMonster · · Score: 1

    I saw those slides. There were 17 levels of #ifdefs in the code.

    Wouldn't surprise me if people commenting on hyperbole have never actually seen the source code to OpenSSL or any other open source library. They are all universally littered with ifdefs and compatibility layers from the dawn of civilization with entire suites of meta-programs (e.g. autotools) devoted to making it all work.

    When managed properly these things are a non-issue.

  34. Re:"Audit"? Try massive rewrite. by Altus · · Score: 1

    More than that I think this is a matter of not having the resources to deal with the codebase because OpenSSL just isn't all that sexy and man hours aren't just being thrown at that project. Much of the code that LibreSSL is removing was already tagged for removal but the man hours weren't there to take it out and throughly test the results. Now that all hell has broken loose more man hours are being thrown at it. Where were these awesome LibreSSL folks before the blowup? I'm sure plenty of people were aware that the code was a mess but now there is sufficient political capitol to get people moving to fix it.

    Its the same problem that closed shops have... nobody want's to prioritize technical debt and code trimming especially when they are heavily resource constrained.

    Luckily now that all hell has broken loose resources are being allocated and money is even flowing into the project.... hopefully this is good news but my guess is the resources dry up before the job is done and we end up with something that still has a lot of hidden problem and new ones will be layered on top of that.... this is pretty much how we roll in the world of software.

    --

    "In America, first you get the sugar, then you get the power, then you get the women..." -H. Simpson

  35. Re:"Audit"? Try massive rewrite. by Altus · · Score: 1

    the problem being that how there are 2 sets of resources doing the same thing.... a shame really since neither one will probably be fully successful at paying down all the technical debt.

    --

    "In America, first you get the sugar, then you get the power, then you get the women..." -H. Simpson

  36. Re:OpenSSL and what else. by Forever+Wondering · · Score: 1

    The OpenBSD folks forked OpenSSL into LibreSSL. In addition to checking security, they are doing general code cleanup, removing unnecessary/dead code. They did a talk recently about what they've accomplished: https://www.youtube.com/watch?...

    IMO [as a programmer of 40+ years (30+ with C)], the programming style of the code is horrible. One of the functions that produced heartbleed is called dtls1_process_heartbeat. For starters, it has one of the worst indenting schemes I've seen and seems to violate most style/best practice guides I've read. It isn't surprising that a bug [security or not] would creep in.

    Here's the original commit for the code:
    http://git.openssl.org/gitweb/...

    Here's the commit for the heartbleed fix:
    http://git.openssl.org/gitweb/...

    --
    Like a good neighbor, fsck is there ...
  37. Re: by Anonymous Coward · · Score: 1

    LibreSSL isn't close enough to an American-agenda (NSA). America needs to pursue insecure OpenSSL to find new levels of incompetence.

  38. vms by __aablib8664 · · Score: 1

    So YOU'RE the guy --who is running Big-Endian AMD64 !! (*cvs)

    Most of what they are ripping out is archaic, un-realistic, or poor implementations platforms. You could argue that hacked-support for too many platforms is part of the reason openssl is in the position its in today - if you can't do it right (or don't have the resources to), don't do it. Name a platform other than VMS, they've ripped out and that you need : )

  39. Re:"Audit"? Try massive rewrite. by garyebickford · · Score: 1

    I have an answer to anyone who comes later to look at the code and says, "WTF??" - "Historical reasons!" This covers the seven different hacks that resulted from the hardware changing, the requirements being uprooted and new ones being grafted on, bad design decisions, and 14 years of mods to handle various idiosyncracies of different machines and OS that the dang code had to run on in those 14 years.

    --
    It's easier to be a result of the past, but more fun to be a cause of the future! http://www.spacefinancegroup.com/
  40. Re:OpenSSL and what else. by petermgreen · · Score: 1

    IIRC recent versions of gnutls are under a LGPLv3+/GPLv2+ dual license.

    I belive mozilla NSS is under the standard mozilla tri-license but i'm not positive on that.

    --
    note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
  41. Re:OpenSSL and what else. Umm...LibreSSL by petermgreen · · Score: 1

    Be careful with libressl though, the developers have been stripping out what they see as the wrong approach to portability and currently only support openbsd. There have been third party ports to other operating systems but great care is needed when making such ports as assumptions that hold on openbsd but not on other platforms may go unnoticed.

    A badly done port of libressl could easilly end up significantly worse than openssl.

    --
    note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
  42. Re:"Audit"? Try massive rewrite. by Anonymous Coward · · Score: 1

    Their fork has already tossed out tens of thousands of lines of code and started again.

    Well yes, if you only target a single platform, that sure makes it easier.

  43. Re:"Audit"? Try massive rewrite. by QuietLagoon · · Score: 1

    ....technical-debt accumulating in the codebase...

    Are we playing buzzword bingo? If so, I concede, you win.

    .

  44. Re:"Audit"? Try massive rewrite. by Wootery · · Score: 1

    Nope.

    Are you not familiar with the idea of technical debt?

    That I can recall, I've only ever seen it used by technical people, never by managers or marketers.