squiggleslash writes: One question arose almost immediately upon the exposure of Heartbleed (Original Slashdot story), the infamous OpenSSL exploit that can leak confidential information and even private keys to the Internet: Did the NSA know about it, and did they exploit if so? The answer is "Yes". Bloomberg reports that "The agency found the Heartbeat glitch shortly after its introduction, according to one of the people familiar with the matter, and it became a basic part of the agency’s toolkit for stealing account passwords and other common tasks." Some National Security experts are upset about this, given the same flaw could just as easily be used by foreign governments against Americans as vice versa.
Attend or create a Slashdot 20th anniversary party! DEAL: For $25 - Add A Second Phone Number To Your Smartphone for life! Use promo code SLASHDOT25. Check out the new SourceForge HTML5 Internet speed test. ×