@hackerfactor @torproject @BlockchainComns To your side of the equation I think their response has been far too long, and as an active user and supporter of Tor I need them to be more secure. And as the co-author of SSL/TLS, things like Heartbleed (also a money problem) worry me.

Christopher Allen

@ChristopherA

@hackerfactor @torproject @BlockchainComns Remember, you said in your blog that you didn't have time to learn how to be part of the community to be able to contribute the fix yourself. Community costs management time and resources too. And I find I am peter-principled keeping money flowing too, so some costs there.

7/23/2020, 8:16:13 PM

Favs: 0

Retweets: 0

link

Christopher Allen

@ChristopherA

@hackerfactor @torproject @BlockchainComns There is also a matter of priorities — who knows if there is some other project in the works that totally replaces that code? Again, I have no idea of the internals, and yes, $3-$4M a year would be a great budget to have, but don't call it easy. …

7/23/2020, 8:17:33 PM

Favs: 0

Retweets: 0

link

Christopher Allen

@ChristopherA

@hackerfactor @torproject @BlockchainComns To your side of the equation I think their response has been far too long, and as an active user and supporter of Tor I need them to be more secure. And as the co-author of SSL/TLS, things like Heartbleed (also a money problem) worry me.

7/23/2020, 8:19:21 PM

Favs: 0

Retweets: 0

link

Christopher Allen

@ChristopherA

@hackerfactor @torproject @BlockchainComns Worse, Tor just lost their best revenue sources, the OTF. This doesn't excuse long delays to fix old vulnerability reports, but it does mean that they are probably devoting as much time to new issues as they should be.

7/23/2020, 8:22:04 PM

Favs: 0

Retweets: 0

link

Christopher Allen

@ChristopherA

@hackerfactor @torproject @BlockchainComns So again, I have sympathy for both sides of the problem, and deep concern about underfunding of security infrastruture in general.

7/23/2020, 8:24:44 PM

Favs: 0

Retweets: 0

link

Christopher Allen

@ChristopherA

@hackerfactor @torproject @BlockchainComns My TLS secures trillions of $ in commerce, but Heartbleed still happened because of insufficient funding. A blip increase in funding happened for a while after that attack, but I feel that support is falling and is still is underfunded. So we have system problems too.

7/23/2020, 8:25:30 PM

Favs: 0

Retweets: 0

link

Christopher Allen

@ChristopherA

@hackerfactor @torproject @BlockchainComns Part of why I founded @BlockchainComns is to look deeper at the root of these problems while we also practice what we preach and deliver on our advocacy. No easy answers, but we are understanding the problem better. (fini)

7/23/2020, 8:27:10 PM

Favs: 0

Retweets: 0

link