<p dir="ltr">If it wasn't open source it would be this time next year before we knew about it.</p>
<div class="gmail_quote">On Apr 10, 2014 10:39 AM, "Bob Nance" <<a href="mailto:bob.nance@novationsys.com">bob.nance@novationsys.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
So, lesson learned? Stay way behind on updates and maybe you’ll avoid<br>
being affected!<br>
<br>
Microsoft should be all over this: “OpenSource is dangerous!”<br>
<br>
-Bob<br>
<br>
<br>
--<br>
Bob Nance<br>
<br>
Novation Systems<br>
<a href="tel:256-534-4620" value="+12565344620">256-534-4620</a>; 227<br>
<br>
<br>
<br>
<br>
<br>
On 4/10/14, 10:31 AM, "Chris Brightwell" <<a href="mailto:chris@dimwell.net">chris@dimwell.net</a>> wrote:<br>
<br>
>Users of OS X and OS X Server, assuming they're up to date (OS X<br>
>Mavericks,<br>
>10.9.2), appear to be unaffected.<br>
><br>
><a href="http://www.tuaw.com/2014/04/09/why-the-openssl-heartbleed-bug-doesnt-affec" target="_blank">http://www.tuaw.com/2014/04/09/why-the-openssl-heartbleed-bug-doesnt-affec</a><br>
>t-os-x-or-os-x-serve/<br>
><br>
><br>
>On Thu, Apr 10, 2014 at 10:26 AM, Bob Nance<br>
><<a href="mailto:bob.nance@novationsys.com">bob.nance@novationsys.com</a>>wrote:<br>
><br>
>> ALL versions of OpenSSL had the bug.<br>
>><br>
>> There is no way to track that the bug was triggered.<br>
>><br>
>> It did not require you to actually access or authenticate to the system<br>
>>in<br>
>> any way.<br>
>><br>
>> The bug, basically, did a memory dump of the running system (as I<br>
>> understand it).<br>
>><br>
>> So, it must be assumed that EVERY OpenSSL implementation was being<br>
>> triggered every few minutes since the dawn of time.<br>
>><br>
>> Yes, itıs that bad.<br>
>><br>
>><br>
>><br>
>-------------- next part --------------<br>
>An HTML attachment was scrubbed...<br>
>URL:<br>
><<a href="http://lunagroup.us/pipermail/luna/attachments/20140410/2347c836/attachme" target="_blank">http://lunagroup.us/pipermail/luna/attachments/20140410/2347c836/attachme</a><br>
>nt.html><br>
>_______________________________________________<br>
>LUNA mailing list<br>
><a href="mailto:LUNA@lunagroup.us">LUNA@lunagroup.us</a><br>
><a href="http://lunagroup.us/mailman/listinfo/luna" target="_blank">http://lunagroup.us/mailman/listinfo/luna</a><br>
<br>
_______________________________________________<br>
LUNA mailing list<br>
<a href="mailto:LUNA@lunagroup.us">LUNA@lunagroup.us</a><br>
<a href="http://lunagroup.us/mailman/listinfo/luna" target="_blank">http://lunagroup.us/mailman/listinfo/luna</a><br>
</blockquote></div>