Codenomicon found a serious flaw in the world's largest open-source cryptographic service OpenSSL

Earlier this month, a security company called Codenomicon found a serious loophole in the world's largest open-source cryptographic service, OpenSSL, which hackers exploited to steal the keys that Web sites use to encrypt online transactions and web connections, could have as many as hundreds of thousands of affected servers, caused serious panic in the circle. Fortunately, Codenomicon also released patches while releasing the vulnerability message. But better to prevent than to mend.

Recently, 12 technology giants, including Google, Microsoft and Facebook, launched a project called the Core Infrastructure Initiative. As investors, Google and other giants of the annual contribution of more than 100,000 U.S. dollars, a period of three years, a total project funding of 3.2 million U.S. dollars. The funding is managed by the Linux Foundation. The main purpose of the funds is to ensure the security of software infrastructure, in which OpenSSL nature is the main object, in addition, Modssl, PGP, Opencryptolab and other basic protocols are also within the protected range.

"This is actually something we should have done a long time ago," said Jim Zemlin, the project's executive director. Of course, if we look back in five years, we may also realize how important it is to do things today! ”