OpenSSL
6 statements across 5 episodes · 1 bullish · 3 bearish · 4 people on the record · first statement Jul 26, 2018 by Ali Yahya · said 7 times in 5 episodes since 2018 · across every show →
Mentions by year
brought up most by Michael Rogers (2), Ali Yahya (2), Vitalik Buterin (1), Orion Hindawi (1), Nadia Eghbal (1)
tap a year for its mentions
2019 6 mentions in 4 episodes 2 per episode
2018 1 mention in 1 episode
Everything said about OpenSSL, oldest first
Jul 26, 2018 negative
Ali Yahya: OpenSSL underfunding highlights open-source value capture failure
“Even though SSL is a critical piece of infrastructure and is used by sort of every single person in the world who connects to the internet only a couple of people were really in charge of maintaining the implementation of OpenSSL. And so, not enough of the val…”
Jan 2, 2019 positive
Hindawi: Tanium queries enterprise OpenSSL versions across all endpoints in 15 seconds
“Our customers literally could ask an English language question. Tell me all the machines and versions of open SSL for every machine that's got open SSL across the environment and get an answer back in 15 seconds.”
Jan 2, 2019 negative
Vitalik: OpenSSL underfunding directly caused the Heartbleed bug
“Bottom-level protocols are something that's been, like, so horribly underfunded. You know, like, in the mainstream world, if you look at even something like the hard bleed bug, which happened in large part because OpenSSL security research was just, like, so h…”
Jan 2, 2019 neutral
Eghbal: Open-source popularity and project health are separate metrics
“So you can have projects like OpenSSL might be a project that was really, really popular. Lots of people use it, but not actually healthy. Until we separate those things out, then you have the problem of people saying, well, if it's, you know, if no one's main…”
Jan 2, 2019
Eghbal: OpenSSL had only one paid maintainer when Heartbleed hit
“There was, like, a very critical bug that was found in OpenSSL, and the question Was, well, why did nobody find this before? And the answer was, because there are, like, two, there's one paid person, and there's, like, 10 volunteers that are working on this.”
Jan 2, 2019 negative
Yahya: OpenSSL Heartbleed stemmed from open source's failure to capture value
“And this has been historically a big problem in open source, like, for example, in the world of which is generally open source, like for example, the Heartbleed bug in SSL is interesting because even though SSL is a critical piece of infrastructure, and is use…”