The NSA reportedly exploited Heartbleed for 2 years, but government denies it [Updated]
Apr11
When news first broke of the devastating Heartbleed bug in the OpenSSL encryption standard, speculation immediately arose that governments had known about the flaw and taken advantage of it for their own surveillance efforts. A new report from Bloomberg claims that the US National Security Agency has been exploiting Heartbleed for at least two years. An NSA spokesperson declined to comment to Bloomberg on the allegations. Update: The NSA has issued a statement on Twitter. Statement: NSA was not aware of the recently identified Heartbleed vulnerability until it was made public. — NSA/CSS (@NSA_PAO) April 11, 2014 While the report lacks…
This story continues at The Next Web