• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.
  • The forums have been upgraded with support for dark mode. By default it will follow the setting on your system/browser. You may override it by scrolling to the end of the page and clicking the gears icon.

Programming Error Made Years Ago turns Open Source Software into Ticking Time Bomb

zekrahminator

McLovin
Joined
Jan 29, 2006
Messages
9,066 (1.28/day)
Location
My house.
Processor AMD Athlon 64 X2 4800+ Brisbane @ 2.8GHz (224x12.5, 1.425V)
Motherboard Gigabyte sumthin-or-another, it's got an nForce 430
Cooling Dual 120mm case fans front/rear, Arctic Cooling Freezer 64 Pro, Zalman VF-900 on GPU
Memory 2GB G.Skill DDR2 800
Video Card(s) Sapphire X850XT @ 580/600
Storage WD 160 GB SATA hard drive.
Display(s) Hanns G 19" widescreen, 5ms response time, 1440x900
Case Thermaltake Soprano (black with side window).
Audio Device(s) Soundblaster Live! 24 bit (paired with X-530 speakers).
Power Supply ThermalTake 430W TR2
Software XP Home SP2, can't wait for Vista SP1.
When open source software makers made what would eventually become the more current versions of Linux, Unix, and Mac OS X, they undertook a very important task: ensuring that whenever a password was generated to keep confidential data secret, that it would actually be secure. However, they apparently made a rudimentary programming error, and it went out into the world of open source software unnoticed. A couple years down the road, some hackers pointed out with glee that the OpenSSL key generator is basically useless as a security measure (the actual flaw is explained much more thoroughly in the source link). Because OpenSSL is used in far more systems than a couple home servers, we have a serious problem on our hands. Even though the original authors have issued a patch, there's no guarantee that it will get around fast enough to prevent some serious damage.

View at TechPowerUp Main Site
 
On the brighter side since the software is open source there shouldn't be anyone to sue.
 
Haha, thats right Jocksteel. Hopefully, nothing major will come from this.
 
Well there goes the "alternate" OS's claims of being more "secure" than Windows..:rolleyes:..Hmmm...I guess if someone has the know-how and the smarts for it, anything can be hacked..:shadedshu
 
Why it doesn't surprise me that there are no legitimate sources on this topic...

@zekrahminator: Please consider some research before posting such serious accusations.
 
Why it doesn't surprise me that there are no legitimate sources on this topic...

@zekrahminator: Please consider some research before posting such serious accusations.

How about you click the source link which has plenty of info and links for you to click!
 
The patch was released ages ago. Its opensource. Here's your free chill pill. Wooohooo
 
How about you click the source link which has plenty of info and links for you to click!

Have you tried? ;)
No offence, just refering something more trustworthy would make much more sence on such a case. Don't you agree?
 
Linux is not immune to hackers and malware, and niether is OS X; they are not widely exploited because they are not widely used by home users.
 
Of course they aren't immune, but they are less used (and thus less popular with hackers etc.)

If someone wants to steal bank details, it's easier on a family compuer with kids and parents using it, rather than a linux machine with a 22yr old computer geek using it. The operating system is only one factor, and most "hacks" are often from human error anyway (i.e. having stupidly easy passwords, clicking ads wih viruses etc)
 
Back
Top