OpenSSL wide open to hackers

Red_Machine · Apr 8, 2014

Dunno if anyone has posted this here yet or not, but I'm completely floored by this. This is worse than RSA's SecurID being hacked, nobody's safe from it.

http://techcrunch.com/2014/04/07/ma...sl-could-effect-a-huge-chunk-of-the-internet/

remixedcat · Apr 8, 2014

tisk..tisk

pr0n Inspector · Apr 10, 2014

worst part is that it's 2-year-old. could've been silently exploited for all we know.

Peter1986C · Apr 10, 2014

Didn't GnuTLS have a similar bug not very long ago?

remixedcat · Apr 10, 2014

See some of these open source project people spend more time arguing over stupid crap instead of fixing stuff. Typical Linux mentality. Smh.

Ferrum Master · Apr 10, 2014

remixedcat said:
See some of these open source project people spend more time arguing over stupid crap instead of fixing stuff. Typical Linux mentality. Smh.

You mean Linus's ego inheritance...

pr0n Inspector · Apr 11, 2014

remixedcat said:
See some of these open source project people spend more time arguing over stupid crap instead of fixing stuff. Typical Linux mentality. Smh.

WTF? OpenSSL has nothing to do with Linux. It's not even using the same type of license.

And I'm not going to even touch on how stupid it is to assume tens of thousands of programmers all over the world just somehow all share the same "Linux mentality"(wtf does that even mean). You seem to think being a yes man to some corporate managers somehow makes you a better coder.

remixedcat · Apr 11, 2014

Its the god complex mentality they have that Linus perpetuated. Also the fact they tell people to eff off instead of taking criticism gracefully. Not saying it about all just a lot of these projects have this issue. Its sad.

eidairaman1 · Apr 11, 2014

sounds like comcast

pr0n Inspector · Apr 11, 2014

remixedcat said:
Its the god complex mentality they have that Linus perpetuated. Also the fact they tell people to eff off instead of taking criticism gracefully. Not saying it about all just a lot of these projects have this issue. Its sad.

What's "a lot"?

Sometimes people just don't like some hot heads suddenly barge in and start making many or radical commits to projects they started or worked on for years, it's perfectly understandable. The open source community is held together by collaboration, software development simply doesn't work like in corporate environments where you should just shut up and do your job. You can just take the code and fork it if you disagree with the project leaders that much and many did, some even overtook the original.

BiggieShady · Apr 11, 2014

pr0n Inspector said:
Sometimes people just don't like some hot heads suddenly barge in and start making many or radical commits to projects they started or worked on for years, it's perfectly understandable.

This is much more pronounced when the open source project is a security library used by more than 50% of internet.
I wonder why no one ever suspects foul play - it would be so easy to sabotage this kind of project by committing code that leaks memory (or paying someone involved to do it).

Shou Miko · Apr 11, 2014

doesn't this just show that nothing is perfect when it comes to security?

we all know this shouldn't exist but yet it does

Naito · Apr 11, 2014

puma99dk| said:
doesn't this just show that nothing is perfect when it comes to security?

Security? Ha. Nothing of the sort exists with agencies like the NSA around.

flmatter · Apr 13, 2014

http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/
For sites affected by heartbleed bug lol

remixedcat · Apr 13, 2014

I still think the NSA paid someone off

Champ · Apr 13, 2014

so has anything arisen from this yet?

flmatter · Apr 13, 2014

Not really, just change your passwords, it is truly amazing how quiet it has been, from everyone - anti-virus companies to gov't intel agencies.

remixedcat · Apr 13, 2014

NSA has everyone by the balls

Divide Overflow · Apr 13, 2014

Champ said:
so has anything arisen from this yet?

Hasn't been anything attributed to this vulnerability yet. Now that it's widely known, I'm sure there will be a couple of exploits on the servers who are slow to patch.

Aquinus · Apr 13, 2014

Divide Overflow said:
Hasn't been anything attributed to this vulnerability yet. Now that it's widely known, I'm sure there will be a couple of exploits on the servers who are slow to patch.

If they're really that slow, it's possible that they never enabled the heartbeat extension or their software is older than the bug. Either way, I think this has been an over-glorified bug report. The content of the data that a "hacker" would get from this would widely vary. It won't always lead to a breach of security either.

System Name	Chachamaru-IV \| Retro Battlestation
Processor	AMD Ryzen 9 5900X \| Intel Pentium II 450MHz
Motherboard	ASUS ROG STRIX X570-F Gaming \| MSI MS-6116 (Intel 440BX chipset)
Cooling	Noctua NH-D15 SE-AM4
Memory	32GB Corsair DDR4-3000 (16-20-20-38) \| 512MB PC133 SDRAM
Video Card(s)	nVIDIA GeForce RTX 4070 FE \| 3dfx Voodoo3 3000
Storage	1TB WD_Black SN850 NVME SSD (OS), Toshiba 3TB (Storage), Toshiba 3TB (Steam)
Display(s)	Samsung Odyssey G5 27" @ 1440p144 & Dell P2312H @ 1080p60
Case	SilverStone Seta A1 \| Beige box
Audio Device(s)	Creative Sound Blaster AE-7 (Speakers), Creative Zen Hybrid headset \| Sound Blaster AWE64
Power Supply	EVGA Supernova 750 G2 \| 250W ASETEC
Mouse	Roccat Kone Air\| Microsoft Serial Mouse v2.0A
Keyboard	Vortex Race3 \| Dell AT102W
Software	Microsoft Windows 11 Pro \| Microsoft Windows 98SE

System Name	RemixedBeast-NX
Processor	Intel Xeon E5-2690 @ 2.9Ghz (8C/16T)
Motherboard	Dell Inc. 08HPGT (CPU 1)
Cooling	Dell Standard
Memory	24GB ECC
Video Card(s)	Gigabyte Nvidia RTX2060 6GB
Storage	2TB Samsung 860 EVO SSD//2TB WD Black HDD
Display(s)	Samsung SyncMaster P2350 23in @ 1920x1080 + Dell E2013H 20 in @1600x900
Case	Dell Precision T3600 Chassis
Audio Device(s)	Beyerdynamic DT770 Pro 80 // Fiio E7 Amp/DAC
Power Supply	630w Dell T3600 PSU
Mouse	Logitech G700s/G502
Keyboard	Logitech K740
Software	Linux Mint 20
Benchmark Scores	Network: APs: Cisco Meraki MR32, Ubiquiti Unifi AP-AC-LR and Lite Router/Sw:Meraki MX64 MS220-8P

System Name	desktop \| Odroid N2+ \|
Processor	AMD Ryzen 5 3600 \| Amlogic S922X \|
Motherboard	Gigabyte B550M DS3H \|Odroid N2+ \|
Cooling	Inter-Tech Argus SU-200, 3x Arctic P12 case fans \| stock heatsink + fan \|
Memory	Gskill Aegis DDR4 32GB \| 4 GB DDR4 \|
Video Card(s)	Sapphire Pulse RX 6600 (8GB) \| Arm Mali G52 \|
Storage	SK Hynix SSD 240GB, Samsung 840 EVO 250 GB, Toshiba DT01ACA100 1T \| Samsung 850 Evo 500GB \|
Display(s)	AOC G2260VWQ6 \| LG 24MT57D \|
Case	Asus Prime 201 \| Stock case (black version) \|
Audio Device(s)	integrated
Power Supply	BeQuiet! Pure Power 11 400W \| 12v barrel jack \|
Mouse	Logitech G500 \|Steelseries Rival 300
Keyboard	Qpad MK-50 (Cherry MX brown)\| Blaze Keyboard
Software	Windows 10, Various Linux distros \| Gentoo Linux

System Name	RemixedBeast-NX
Processor	Intel Xeon E5-2690 @ 2.9Ghz (8C/16T)
Motherboard	Dell Inc. 08HPGT (CPU 1)
Cooling	Dell Standard
Memory	24GB ECC
Video Card(s)	Gigabyte Nvidia RTX2060 6GB
Storage	2TB Samsung 860 EVO SSD//2TB WD Black HDD
Display(s)	Samsung SyncMaster P2350 23in @ 1920x1080 + Dell E2013H 20 in @1600x900
Case	Dell Precision T3600 Chassis
Audio Device(s)	Beyerdynamic DT770 Pro 80 // Fiio E7 Amp/DAC
Power Supply	630w Dell T3600 PSU
Mouse	Logitech G700s/G502
Keyboard	Logitech K740
Software	Linux Mint 20
Benchmark Scores	Network: APs: Cisco Meraki MR32, Ubiquiti Unifi AP-AC-LR and Lite Router/Sw:Meraki MX64 MS220-8P

System Name	HELLSTAR
Processor	AMD RYZEN 9 5950X
Motherboard	ASUS Strix X570-E
Cooling	2x 360 + 280 rads. 3x Gentle Typhoons, 3x Phanteks T30, 2x TT T140 . EK-Quantum Momentum Monoblock.
Memory	4x8GB G.SKILL Trident Z RGB F4-4133C19D-16GTZR 14-16-12-30-44
Video Card(s)	Sapphire Pulse RX 7900XTX + under waterblock.
Storage	Optane 900P[W11] + WD BLACK SN850X 4TB + 750 EVO 500GB + 1TB 980PRO[FEDORA]
Display(s)	Philips PHL BDM3270 + Acer XV242Y
Case	Lian Li O11 Dynamic EVO
Audio Device(s)	Sound Blaster ZxR
Power Supply	Fractal Design Newton R3 1000W
Mouse	Razer Basilisk
Keyboard	Razer BlackWidow V3 - Yellow Switch
Software	FEDORA 39 / Windows 11 insider

OpenSSL wide open to hackers

Red_Machine

remixedcat

pr0n Inspector

Peter1986C

remixedcat

Ferrum Master

pr0n Inspector

remixedcat

eidairaman1

The Exiled Airman

pr0n Inspector

BiggieShady

Shou Miko

Naito

flmatter

remixedcat

Champ

flmatter

remixedcat

Divide Overflow

Aquinus

Resident Wat-man

System Name	PCGOD
Processor	AMD FX 8350@ 5.0GHz
Motherboard	Asus TUF 990FX Sabertooth R2 2901 Bios
Cooling	Scythe Ashura, 2×BitFenix 230mm Spectre Pro LED (Blue,Green), 2x BitFenix 140mm Spectre Pro LED
Memory	16 GB Gskill Ripjaws X 2133 (2400 OC, 10-10-12-20-20, 1T, 1.65V)
Video Card(s)	AMD Radeon 290 Sapphire Vapor-X
Storage	Samsung 840 Pro 256GB, WD Velociraptor 1TB
Display(s)	NEC Multisync LCD 1700V (Display Port Adapter)
Case	AeroCool Xpredator Evil Blue Edition
Audio Device(s)	Creative Labs Sound Blaster ZxR
Power Supply	Seasonic 1250 XM2 Series (XP3)
Mouse	Roccat Kone XTD
Keyboard	Roccat Ryos MK Pro
Software	Windows 7 Pro 64

System Name	Windows 10 64-bit Core i7 6700
Processor	Intel Core i7 6700
Motherboard	Asus Z170M-PLUS
Cooling	Corsair AIO
Memory	2 x 8 GB Kingston DDR4 2666
Video Card(s)	Gigabyte NVIDIA GeForce GTX 1060 6GB
Storage	Western Digital Caviar Blue 1 TB, Seagate Baracuda 1 TB
Display(s)	Dell P2414H
Case	Corsair Carbide Air 540
Audio Device(s)	Realtek HD Audio
Power Supply	Corsair TX v2 650W
Mouse	Steelseries Sensei
Keyboard	CM Storm Quickfire Pro, Cherry MX Reds
Software	MS Windows 10 Pro 64-bit

System Name	Lynni PS \ Lenowo TwinkPad T480
Processor	AMD Ryzen 7 7700 Raphael \ i7-8550U Kaby Lake-R
Motherboard	ASRock B650M PG Riptide Bios v. 2.02 AMD AGESA 1.1.0.0 \ Lenowo 20L60036MX Bios 1.47
Cooling	Noctua NH-D15 Chromax.Black (Only middle fan) \ Lenowo WN-2
Memory	G.Skill Flare X5 2x16GB DDR5 6000MHZ CL36-36-36-96 AMD EXPO \ Willk Elektronik 2x16GB 2666MHZ CL17
Video Card(s)	Asus GeForce RTX™ 4070 Dual OC GPU: 2325-2355 MEM: 1462\| Nvidia GeForce MX™ 150 2GB GDDR5 Micron
Storage	Gigabyte M30 1TB\|Sabrent Rocket 2TB\| HDD: 10TB\|1TB \ SKHynix 256GB 2242 3x2
Display(s)	LG UltraGear 27GP850-B 1440p@165Hz \| LG 48CX OLED 4K HDR \| AUO 14" 1440p IPS
Case	Asus Prime AP201 White Mesh \| Lenowo T480 chassis
Audio Device(s)	Steelseries Arctis Pro Wireless
Power Supply	Be Quiet! Pure Power 12 M 750W Goldie \| 65W
Mouse	Logitech G305 Lightspeedy Wireless \| Lenowo TouchPad & Logitech G305
Keyboard	Akko 3108 DS Horizon V2 Cream Yellow \| T480 UK Lumi
Software	Win11 Pro 23H2 UK
Benchmark Scores	3DMARK: https://www.3dmark.com/3dm/89434432? GPU-Z: https://www.techpowerup.com/gpuz/details/v3zbr

System Name	Desktop \| Laptop
Processor	AMD Ryzen 7 5800X3D \| Intel Core i7 7700HQ
Motherboard	MAG X570S Torpedo Max\| Neptune KLS HM175
Cooling	Corsair H100x \| Twin fan, fin stack & heat pipes
Memory	32GB G.Skill F4-3600C16-8GVK @ 3600MHz / 16-16-16-36-1T \| 16GB DDR4 @ 2400MHz / 17-17-17-39-2T
Video Card(s)	EVGA RTX 3080 Ti FTW3 Ultra \| GTX 1050 Ti 4GB
Storage	Kingston KC3000 1TB + Kingston KC3000 2TB + Samsung 860 EVO 1TB \| 970 Evo 500GB
Display(s)	32" Dell G3223Q (2160p @ 144Hz) \| 17" IPS 1920x1080P
Case	Fractal Meshify 2 Compact \| Aspire V Nitro BE
Audio Device(s)	ifi Audio ZEN DAC V2 + Focal Radiance / HyperX Solocast
Power Supply	Super Flower Leadex V Platinum Pro 1000W \| 150W
Mouse	Razer Viper Ultimate \| Logitech MX Anywhere 2
Keyboard	Razer Huntsman V2 Optical (Linear Red)
Software	Windows 11 Pro x64

System Name	Matter's / Helios 300 Predator
Processor	Ryzen 7 2700 / i7 7700HQ
Motherboard	B450 Tomahawk / Acer Helios 300 Predator
Cooling	Arctic Freezer eSports Duo
Memory	Patriot Viper ddr4 32gb / 32gb gskill ddr4
Video Card(s)	MSI RTX 2080 Super Ventus OC / GTX 1060 6gb
Storage	Patriot Viper nvme M2, crucial MX300 275gb, Samsung 860 qvo 1tb
Display(s)	Acer 24" 1080p / 15.6 1080p HD
Case	Antec 300 / Acer Helios 300 Predator
Audio Device(s)	On Board - Steel Series Arctis Pro Wireless Cans
Power Supply	Antec 850watt high current pro
Mouse	Steel series Rival 600
Keyboard	Corsair K70 / Acer Helios 300 Predator
Software	Win 10 Pro / Win 10 Home

System Name	Champ's 1440P Rig
Processor	Intel i7-4770K @ 4.6 GHz
Motherboard	AsRock Z97 Extreme6
Cooling	Corsair H60
Memory	Corsair Vengeance 16GB 1600 Mhz 4x4 Blue Ram
Video Card(s)	Nvidia 1080 FE
Storage	Samsung 840 Evo 256 GB/RAID 0 Western Digital Blue 1 TB HDDs
Display(s)	Acer XG270HU
Case	Antec P100
Power Supply	Corsair CX850M
Mouse	Logitech G502
Keyboard	TT eSports Poseidon
Software	Windows 10

Processor	Ryzen 9 5900X
Motherboard	Gigabyte X570 Aorus Master
Cooling	ARCTIC Liquid Freezer II 360 A-RGB
Memory	32 GB Ballistix Elite DDR4-3600 CL16
Video Card(s)	XFX 6800 XT Speedster Merc 319 Black
Storage	Sabrent Rocket NVMe 4.0 1TB
Display(s)	LG 27GL850B x 2 / ASUS MG278Q
Case	be quiet! Silent Base 802
Audio Device(s)	Sound Blaster AE-7 / Sennheiser HD 660S
Power Supply	Seasonic Prime 750W Titanium
Software	Windows 11 Pro 64

System Name	Apollo
Processor	Intel Core i9 9880H
Motherboard	Some proprietary Apple thing.
Memory	64GB DDR4-2667
Video Card(s)	AMD Radeon Pro 5600M, 8GB HBM2
Storage	1TB Apple NVMe, 4TB External
Display(s)	Laptop @ 3072x1920 + 2x LG 5k Ultrafine TB3 displays
Case	MacBook Pro (16", 2019)
Audio Device(s)	AirPods Pro, Sennheiser HD 380s w/ FIIO Alpen 2, or Logitech 2.1 Speakers
Power Supply	96w Power Adapter
Mouse	Logitech MX Master 3
Keyboard	Logitech G915, GL Clicky
Software	MacOS 12.1