[tor-relays] NSA knew about Heartbleed

Delton Barnes delton.barnes at mail.ru
Sat Apr 12 21:02:34 UTC 2014

Delton Barnes:
> That said, if you carefully parse the statement from DNI, it seems to me
> to imply they were aware of the Heartbleed vulnerability in 2014.  Why
> would they say "before 2014" instead of "before its disclosure Monday"
> or something?  They may have known about it weeks or months in advance,
> and been exploiting it or patching their systems.  But that is not as
> egregious as it would be to conceal this flaw for years.

Another statement I see now says they were not aware of the
vulnerability before "April 2014".  If true (which I believe it is) they
had at most about a week's foreknowledge.

More information about the tor-relays mailing list