Description of how to detect a prior #heartbleed exploit: ow.ly/vCtKC

Many have said #heartbleed exploits "leave behind no trace", but that's not true. See how to do it: ow.ly/vCtKC

Were the Snort VRT and EmergingThreat Heartbleed rules really broken for ~days? rvbd.ly/1oN5TPX #InfoSec #HeartbleedBug

Confirmation SSL secret keys can be stolen remotely via #Heartbleed cloudflarechallenge.com/heartbleed

Just posted update to #Heartbleed detection to handle IPv6 based attacks. rvbd.ly/1oN5TPX #infosec

Just added new #Heartbleed detection script: search disks for packet capture files having old/new exploits ow.ly/vCtKC #infosec

Has #Heartbleed been in the wild for long? Just posted new script to scour your drives for exploit in packet capture ow.ly/vCtKC

dropbox spends more on alcohol during its yearly ski trip than OpenSSL has received in donations ever

This recently released post from google is the most succinct statement I've seen so far regarding status of mitigations for #Spectre and #Meltdown: security.googleblog.com/2018/01/more-d…