Open-Source Security Idiots
May 16, 2008, 21:00 (26 Talkback[s])
(Other stories by Steven J. Vaughan-Nichols)
[ Thanks to Steven J.
Vaughan-Nichols for this link. ]
"Sometimes, people do such stupid things that words almost fail
me. That's the case with a Debian 'improvement' to OpenSSL that
rendered this network security program next to useless in Debian,
Ubuntu and other related Linux distributions.
"OpenSSL is used to enable SSL (Secure Socket Layer) and TLS
(Transport Layer Security) in Linux, Unix, Windows and many other
operating systems. It also includes a general purpose cryptography
library. OpenSSL is used not only in operating systems, but in
numerous vital applications such as security for Apache Web
servers, OpenVPN for virtual private networks, and in security
appliances from companies like Check Point and Cisco..."