Were Intelligence Agencies Using Heartbleed

[Unknown_Guy]

https://www.eff.org/deeplinks/2014/04/wild-heart-were-intelligence-agencies-using-heartbleed-november-2013

 

I bet Intelligence Agencies was getting their hands on this.

 

Maybe there's even bigger conspiracy behind this as the bad code was commited in New Years eve so no one notices... lol

[dragosudeki]

Next thing you know, OpenSSL made that loophole intentional. Conspiracy Theory Initiate!

[Jeroen1322]

Where is my tin foil hat?!

[tharvey]

The NSA had to have at least known about it.  They may not have created it but they probably used it.

[Victorious Secret]

After the whole NSA thing, tin foil hats aren't required. This very well may be true

[bluepoodleguy]

If the NSA knew about Heartbleed and told no one it would be a great example of govenment high handedness. Put millions of internet users at terrible risk just so they might recover some data that would make them look good in their reports. A government agency exists to serve the public not figure out ways to increase its funding.

[Fred Castellum]

Wouldn't surprise me if they did use the heartbleed effect to collect data. *shrugs*

[ajoy39]

Yes. Of course they were. This bug saved them a ton if time, effort, and money. They would almost be stupid not to abuse it. 

[Biggerisbetter]

I can not get mad at the NSA for using an exploiting a bug. People do it all the time. I place blame with the open ssl creators.

[Mooshi]

Only an idiot puts incriminated evidence against themselves online so openly. The only places that have relevant info on me are things such as my bank account ect. I'm glad I'm not one of /those/ people who posts dumb crap on Facebook and other public mediums. A rant on a forum is one thing, that embarrassing photo of yourself or plans of world domination with bombs..and kittens posted on Yahoo Answers is another.

[Ashley]

I realize most people nowadays know the NSA as a spy agency. But I think what is most tragic is that they're shirking their purpose of improving security, hence the name National Security Agency.

They still have the task (though who knows how honest they are) of improving IT security, and spying is one thing but now knowing that they are no longer really contributing to security is very sad. Companies want as little cost as possible and security is often not given enough importance, so having an agency doing this work was great.

 

 

That being said of course them spying is just a loose-loose.

1. No proof that it has helped prosecute/catch terrorists beyond a low single digit number of them.

2. Those up to no good already knew security techniques for going "underground" if they're worth their salt.

3. As interaction increasingly happens through the Internet this is the equivalent of having your house listened to and video taped in favor of "national security".