This is an overly optimistic account of who knew what when.
And, how can we protect? Patch? Yes, that's necessary, but not sufficient. We have so many other protocols we rely on that are fragile & intercepted. Self-censorship sucks, and can't possible protect everything either. What to do?
For most people reading this actual article, I think they will come away with the impression that it's a complete account.
>Ever since the "Heartbleed" flaw in encryption protocol OpenSSL was made public on April 7 in the US there have been various questions about who knew what and when.
>Fairfax Media has spoken to various people and groups involved and has compiled the below timeline.
>If you have further information or corrections - especially information about what occurred prior to March 21 at Google - please email the author: bgrubb@fairfaxmedia.com.au. Click here for his PGP key.
I mean, when the NSA & other actors do NOT submit their data to this guy, they can say, it's complete now?
It just stinks to me like it's complacency. Just change your passwords & patch, & then don't worry, share everything again, it's private. In 2014, I don't think we're safe & private anymore at all. I can take the downvotes. I don't like it either.