12 Apr
2014
12 Apr
'14
9:02 p.m.
Delton Barnes:
That said, if you carefully parse the statement from DNI, it seems to me to imply they were aware of the Heartbleed vulnerability in 2014. Why would they say "before 2014" instead of "before its disclosure Monday" or something? They may have known about it weeks or months in advance, and been exploiting it or patching their systems. But that is not as egregious as it would be to conceal this flaw for years.
Another statement I see now says they were not aware of the vulnerability before "April 2014". If true (which I believe it is) they had at most about a week's foreknowledge.