{"product_id":"heartbleed-shirt-cve-2014-0160-openssl-graphic-tee-unhacked","title":"EXHIBIT 0006 — HEARTBLEED","description":"\u003cp\u003eThere was nothing malformed about the request. That is the whole problem.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eRFC 6520 added a heartbeat to TLS: send a small payload, say how long it is, get the same payload back. It keeps a connection alive without renegotiating it.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eOpenSSL took the client's word for the length.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eSend one byte, claim 65535, and the server copies 65535 bytes out of memory starting at your payload and hands them back. Whatever happened to be sitting next to that buffer goes with it — session cookies, form data, credentials, private keys.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThe bug shipped in OpenSSL 1.0.1 on 14 March 2012 and was disclosed on 7 April 2014. Two years and twenty-four days. At disclosure Netcraft put the exposure at 17.5% of trusted TLS sites, around half a million certificates.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eIt is usually filed as a flaw in SSL. It was not. TLS was fine. One optional extension in one library was not — and that library sat under roughly two thirds of the encrypted web, maintained by a handful of people on donations that ran to about two thousand dollars a year.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003ePatching was the easy part. Every affected certificate also had to be reissued and revoked, because nobody could prove what had already been read.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThe commit was reviewed before it shipped. That is the part worth sitting with.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eEXHIBIT 0006 \/ HEARTBLEED \/ 2014\u003c\/p\u003e","brand":"Printify","offers":[{"title":"Light Blue \/ S","offer_id":54505635414300,"sku":"65530559008970775958","price":24.99,"currency_code":"USD","in_stock":true},{"title":"White \/ S","offer_id":54505635447068,"sku":"84308259162167715308","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Heather Royal \/ S","offer_id":54505635479836,"sku":"11444352501124851581","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Natural \/ S","offer_id":54505635512604,"sku":"19303114478268588847","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Ice Grey \/ S","offer_id":54505635545372,"sku":"12221053406629466016","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Sand \/ S","offer_id":54505635578140,"sku":"14336134186858759617","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Light Blue \/ M","offer_id":54505635610908,"sku":"95161252100784789694","price":24.99,"currency_code":"USD","in_stock":true},{"title":"White \/ M","offer_id":54505635643676,"sku":"18338576935699732982","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Heather Royal \/ M","offer_id":54505635676444,"sku":"14280785938724900847","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Natural \/ M","offer_id":54505635709212,"sku":"18577919707672256167","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Ice Grey \/ M","offer_id":54505635741980,"sku":"54745797074877916892","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Sand \/ M","offer_id":54505635774748,"sku":"73172149280510529626","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Light Blue \/ L","offer_id":54505635807516,"sku":"20872046710714585350","price":24.99,"currency_code":"USD","in_stock":true},{"title":"White \/ L","offer_id":54505635840284,"sku":"30487125982728547229","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Heather Royal \/ L","offer_id":54505635873052,"sku":"11653324680735644759","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Natural \/ L","offer_id":54505635905820,"sku":"11661858442916085374","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Ice Grey \/ L","offer_id":54505635938588,"sku":"60391761777084499042","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Sand \/ L","offer_id":54505635971356,"sku":"11324352157277050528","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Light Blue \/ XL","offer_id":54505636004124,"sku":"32921789791505008377","price":24.99,"currency_code":"USD","in_stock":true},{"title":"White \/ XL","offer_id":54505636036892,"sku":"12646007062779462160","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Heather Royal \/ XL","offer_id":54505636069660,"sku":"55369685503948088209","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Natural \/ XL","offer_id":54505636102428,"sku":"39760797155448134864","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Ice Grey \/ XL","offer_id":54505636135196,"sku":"26584632496032789675","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Sand \/ XL","offer_id":54505636167964,"sku":"13979572472584905910","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Light Blue \/ 2XL","offer_id":54505636200732,"sku":"17868469428062426821","price":24.99,"currency_code":"USD","in_stock":true},{"title":"White \/ 2XL","offer_id":54505636233500,"sku":"88003919018551581377","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Heather Royal \/ 2XL","offer_id":54505636266268,"sku":"15050429590473311810","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Natural \/ 2XL","offer_id":54505636299036,"sku":"14995147123488188725","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Ice Grey \/ 2XL","offer_id":54505636331804,"sku":"19094657418361556124","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Sand \/ 2XL","offer_id":54505636364572,"sku":"99864723566954616984","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Light Blue \/ 3XL","offer_id":54505636397340,"sku":"62752223123465558568","price":24.99,"currency_code":"USD","in_stock":true},{"title":"White \/ 3XL","offer_id":54505636430108,"sku":"14079919321259240537","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Heather Royal \/ 3XL","offer_id":54505636462876,"sku":"15294611567129529378","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Natural \/ 3XL","offer_id":54505636495644,"sku":"33833522867708188707","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Ice Grey \/ 3XL","offer_id":54505636528412,"sku":"17570762447280146710","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Sand \/ 3XL","offer_id":54505636561180,"sku":"48800886246011366333","price":24.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0961\/8184\/6300\/files\/1747398065741968894_2048.jpg?v=1788368660","url":"https:\/\/unhacked.shop\/products\/heartbleed-shirt-cve-2014-0160-openssl-graphic-tee-unhacked","provider":"Unhacked","version":"1.0","type":"link"}