Pope Heartbleed I

Encyclical

"Heartbeat Sanguinis". A forgotten length check in OpenSSL's heartbeat extension let anyone read 64 KB of server memory at a time, private keys included, and the whole encrypted web trembled. It was the first bug with a name, a logo and a website, and it showed how much of the internet rested on a project maintained by a handful of volunteers. The Core Infrastructure Initiative followed, along with the lesson that critical software also needs funding.

Saint page: Saint Heartbleed, the Bleeding Heart of OpenSSL

Cardinals

Saint Shellshock, Who Ran What Was Only a Greeting · Saint POODLE