Heartbleed

[hudebnik]

Thanks to jducoeur, this link to XKCD's explanation of the Heartbleed bug.

OMG: I didn't realize it was this simple and stupid. Reason #738 why no production code should be written in C or C++.

Comments

[metahacker.livejournal.com]

The code reviewer has come forward, along with the bug author.

[goldsquare.livejournal.com]

I know.

I thought that was a very good thing, frankly.

Although if they had not, GIT would have done it for them. :-)