| ▲ | woodruffw 2 hours ago |
| I have a pretty good idea. And it has nothing to do with malice or exploitability. |
|
| ▲ | noitpmeder 2 hours ago | parent | next [-] |
| Care to share...??? |
| |
| ▲ | palata 2 hours ago | parent [-] | | Didn't they say it already? They basically think that the OpenSSL API is convoluted. That's my understanding of the comment above, at least. | | |
| ▲ | timschmidt an hour ago | parent [-] | | Unnecessarily complicated APIs are a security code smell precisely because they help hide bugs, leaky abstractions, insecure state, and other exploitable issues. | | |
| ▲ | palata 32 minutes ago | parent [-] | | Did I say they weren't? Not sure why I'm being downvoted here. | | |
| ▲ | timschmidt 12 minutes ago | parent [-] | | Op did immediately above you i.e.: "nothing to do with malice or exploitability" and when asked to explain you responded with: "Didn't they say it already?" Which any reader can verify they have not at the time of 1:42pm EST Oct 23 2026. |
|
|
|
|
|
| ▲ | incanus77 an hour ago | parent | prev [-] |
| Gee, I wonder what it could’ve been… |
