Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I'm not a security guru... So what kind of attack can this cause? Does this mean https will not be secured if the site uses vulnerable OpenSSL?


it means if you're running a bad version of openssl then someone can dump the entire contents of your ram, including public/private keys, and anything that is in memory such as passwords and even DB connections.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: