Linux Foundation pours millions into critical internet infrastructure
Millions of dollars will be invested in maintaining criticial internet infrastructure in the wake of the Heartbleed OpenSSL bug.
The Linux Foundation last week announced the set-up of the Core Infrastructure Initiative (CII) to fund open source projects such as OpenSSL, as a direct response to the Heartbleed crisis.
The bug allows attackers to access in-process data in server and client memory over what was thought to be secured communications. Software such OpenSSL - which runs many critical systems on the internet - is often maintained by a handful of people in their spare time and with little funding, as the cryptographic library's foundation president Steve Marquess pointed out recently in a blog post.