Bruce Schneier personal blog
Random Number Bug in Debian Linux
This is a big deal: On May 13th, 2008 the Debian project announced that Luciano Bello found an interesting vulnerability in the OpenSSL package they were distributing. The bug in question was caused by the removal of the following line of code from md_rand.c MD_Update(&m,buf,j); [ .. ] MD_Update(&m,buf,j); /* purify…
- Points
- 0
- HN comments
- 0
- Submissions
- 0
- Cited by
- 25 commenters
Cited in comments
Linked from 35 Hacker News comments by 25 different people, from Mar 2012 to Nov 2026.
Most recent:
- zbentley · Nov 5, 2026
- ploxiln · Oct 1, 2023
- omoikane · Mar 15, 2023
- ForHackernews · Feb 8, 2023
- hosteur · Feb 6, 2023
