Russ Cox personal blog
Lessons from the Debian/OpenSSL Fiasco (2008)
Last week, Debian announced that in September 2006 they accidentally broke the OpenSSL pseudo-random number generator while trying to silence a Valgrind warning. One effect this had is that the ssh-keygen program installed on recent Debian systems (and Debian-derived systems like Ubuntu) could only generate 32,767…
- Points
- 59
- HN comments
- 25
- Submissions
- 1
- Cited by
- 16 commenters
Security & PrivacyOpen Source2023
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Feb 26, 2023 | Lessons from the Debian/OpenSSL Fiasco (2008) by pgn674 | 59 | 25 |
Cited in comments
Linked from 16 Hacker News comments by 16 different people, from May 2013 to Dec 2025.
Most recent:
