News NSA denies prior knowledge of Heartbleed vuln

Of course a bias towards disclosure of security flaws is another way of saying they don't disclose all flaws or even most flaws. It's such a vacuous statement.

 

That's not the only vacuous part of their statement, they go on to say.
'A clear process exists among agencies for deciding when to share vulnerabilities, the office said in a statement.'

Then you have the Obama convened panel that reviewed surveillance activities saying.

Does fixing software flaws equal disclosure ? It's no good fixing something for a select few.

How short is a short periods of time ? It may only take seconds to use a software flaw.

How rare are “rare instances” ? If we only use a particular software flaw one in a thousand times, is that rare.

 

That is the first thing that popped into my head when I heard the breaking news of heartbleed.

 

Problem is that they could be telling the truth (I'm slightly inclined to believe so given the hidden nature of the bug and the difficulty involved in exploiting it) but they've destroyed so much trust that people won't accept anything they say.

 

Count me as one of the few (or many) who don't trust. The U.S government's (PAUSE: Just for clarity, many western nations B&B is telling lies, although the US seems to be the ring leader)bread and butter is made, lying to the public and keeping secrets. True Fact !