Slashdot Mirror
LibreSSL Unaffected By DROWN
serviscope_minor writes: The OpenBSD people forked and heavily cleaned up OpenSSL to create LibreSSL due to dissatisfaction with the maintainance of OpenSSL, culminating in the heartbleed bug. The emphasis has been on cleaning up the code and improving security, which includes removing things such as SSL2 which has fundamental security flaws. As a result, LibreSSL is not affected by the DROWN bug. LibreSSL is largely compatible with OpenSSL. The main exceptions are in the cases where programs use insecure functions removed from libreSSL, or require bug compatiblity with OpenSSL.
Use any other OS if you want to post messages without capitals.
It doesn't have to be like this. All we need to do is make sure we keep talking.
good grief, why would you want to use an os that can't use capital letters/ that seems really stupid.
whipslash, the parent comment is at -1, and I think it's a perfect example of how bad modding here hurts the discussion.
Of the 20 comments currently here, it's one of the most insightful and informative.
It's obviously relevant, as the submission is all about how code maintained by the OpenBSD devs is free from a serious flaw that affected so many Linux distros.
Yet despite it being one of the best comments posted so far, I have to go out of my way to browse at -1 to see it!
Meanwhile, somebody else totally misunderstood what the parent comment says, and went off on a tangent about Photoshop and Windows. Yet that comment, despite being wrong and adding nothing of value, is currently at +4!
An excellent comment like the parent comment shouldn't be hidden just because it expresses an idea that conflicts with the twisted world view of some Linux fanatics who happen to have mod points here.
Both the -1 modding of the parent and the +4 modding of the other irrelevant comment indicate serious mod abuse is going on here. The best content is suppressed and harder to read, while the junk comments are shoved in our faces.
Bad modding like we see in these cases really hurts the Slashdot experience. It's even worse than the shitty videos. At least those are easy to ignore. The mod abuse, however, is much harder to overlook, given how good comments are hidden and shitty comments are shown instead.