Skip to content
HomeVideos
AllLongsCategoriesPlaylists
BooksBlogsPodcasts
HistoryListsWatch laterLiked videosFollowing

The videos, books, blogs and podcasts Hacker News keeps recommending, all in one place.

VideosBooksBlogsPodcastsAboutPrivacySettings

Data from Hacker News, HackerTube, HackerBooks, HackerBlogs and Open Library. Credits · Not affiliated with Y Combinator.

HomeVideosBooksBlogsPodcasts
Ctrl K

    LibreSSL: The first 30 days, and what the Future Holds

    Andrea Ross

    3 HN recommenders · recommended in 4 months, 2014–2022

    YouTube

    1:05:51 · 5.1K views · May 18, 2014

    Bob Beck of OpenBSD gives a BSDCan 2014 talk on the first month of LibreSSL, the OpenSSL fork. He explains why they forked, what they removed, and examples of the problems found in the OpenSSL code base.

    Recommended as a funny, fascinating tour of how bad the OpenSSL code was and what cleanup looks like.

    Systems, Networks & SecurityCryptographySecurity & hackingLinux & open-source ecosystems
    1. 1:05:45
      LibreSSL with Bob BeckJason Tubnor25K views • 12 years ago
    2. 48:02
      BlackHat USA 2011: SSL And The Future Of AuthenticityChristiaan00895K views • 15 years ago
    3. 46:22
      DEF CON 19 - Moxie Marlinspike - SSL And The Future Of AuthenticityDEFCONConference11K views • 13 years ago
    4. 59:23
      28c3: The Science of Insecurity28c342K views • 14 years ago
    5. 53:00
      The Internet Was Weeks Away From Disaster And No One KnewVeritasium16M views • 8 months ago
    6. 1:02:52
      Joanna Rutkowska: Towards (reasonably) trustworthy x86 laptopsmedia.ccc.de27K views • 10 years ago
    7. 45:50
      "The Mess We're In" by Joe ArmstrongStrange Loop Conference398K views • 12 years ago
    8. 1:07:10
      Brian Beckman: Don't fear the Monadjasonofthel33t415K views • 13 years ago
    9. 53:02
      36C3 - A systematic evaluation of OpenBSD's mitigationsmedia.ccc.de18K views • 6 years ago
    10. 47:18
      The Tragedy of systemdlinux.conf.au1.3M views • 7 years ago
    11. 29:01
      Netanel Rubin: The Perl Jam: Exploiting a 20 Year-old Vulnerabilitymedia.ccc.de7.9K views • 11 years ago
    12. 1:07:22
      Invited Talk - Guy SteeleClojureTV39K views • 9 years ago
    13. 43:28
      Leaping the chasm from proprietary to open: A survivor's guideBryan Cantrill14K views • 11 years ago
    14. 46:06
      NSA operation ORCHESTRA: Annual Status ReportHUP30K views • 12 years ago
    15. 1:14:56
      27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)basti000795K views • 15 years ago
    16. 38:22
      Kim Nilsson - Cracking MtGoxTheBitcoinArmy47K views • 9 years ago
    17. 35:53
      Exposing Tether - Bitcoin's Biggest SecretCoffeezilla4.6M views • 5 years ago
    18. 24:31
      Introduction to LibrePCB A new, powerful and intuitive EDA tool for everyoneFOSDEM15K views • 8 years ago
    19. 15:39
      introducing copyparty, the FOSS file servertripflag614K views • 1 year ago
    20. 1:02:04
      1. Introduction for 15.S12 Blockchain and Money, Fall 2018MIT OpenCourseWare7.2M views • 6 years ago

    4 comments from Hacker News

    1. @mrweaselMay 2020· in “OpenSSL 3.0”

      There is a fascinating and funny talk by Bob Beck from OpenBSD on the first 30 days after forking OpenSSL. One of the things he addresses is the scary code and how is prevents community involvement. He also talks a great deal about all that stuff that's not really relevant anymore and how much they removed from the LibreSSL source code. Apparently the crypto modules are pretty well made according to the OpenBSD developers. LibreSSL: The first 30 days, and what the Future Holds: this video

      RecommendsView on HN
    2. @ivorasMay 2014· in “OpenSSL, OpenSSH and NTP to receive support from Core Infrastructure Initiative”

      Anyone interested in details of LibreSSL development can watch the BSDCan talk at this video - there really are a LOT of instances of braindamaged code in OpenSSL and a radical repair is pretty much the only thing which will work.

      RecommendsView on HN
    3. @yakubinOct 2022· in “Patch OpenSSL on November 1 to avoid “critical” security vulnerability”

      I'd expect higher quality code review from OpenBSD folks (who maintain LibreSSL), compared to OpenSSL. Also, an interesting talk: LibreSSL: The first 30 days, and what the Future Holds from BSDCan: < this video >

      RecommendsView on HN
    4. @shagieSep 2022· in “Outdated vs. Complete: In defense of apps that don’t need updates”

      I am reminded of the libressl - 30 days in report. this video Removing support for old versions is a simplification of what needs to be considered. It is a reduction of complexity. If someone is running a PHP version that has been EOLed, it is perfectly reasonable to discontinue support for it in a library - even if new features that weren't available in the EOL'ed version haven't been added yet.

      CitesView on HN