519 karma · joined August 17, 2012
See http://arstechnica.com/security/2014/03/virtually-no-evidenc...
Re: Amazon, I think you are totally wrong. They are a tech company that happens to do Retail.
People here love to poke fun at WordPress. I'd love to take any of them out of startup-land and make them work for a full week in a 10 years old corporate piece of software, written pretty much in any language.
To learn how to document code.
Other than that, really cool idea.
I'm not sure how you can handle this in any different way as they did, really.
edit: I contacted the developers and they were super fast to patch everything, roll keys, etc. It's contained now.
It's harder to get a generic exploit that will give you access to a lot of targets. But I'd argue that finding an exploit for a particular target would be easier.
Having 200 broken TSL libraries is security by obscurity. Not very useful, and a pain for sysadmins.