HackerTube.dev

LibreSSL with Bob Beck

Jason Tubnor · 24.7K views · 2014-05-17 · 1:05:45

Open on YouTube ↗

If playback is restricted in your region, try opening the original video. Use Mark watched to add it to your marked videos.

Overview

Bob Beck of OpenBSD describes the first month of LibreSSL, the fork aimed at cleaning up OpenSSL, including oddities found in the code base and why it was cleaned rather than audited cryptographically.

On Hacker News

Frequently linked as an entertaining and alarming account of OpenSSL code quality and why the fork happened.

Recommended by 6 HN people across 5 months · HN mentions 2014–2025

Topics

CryptographySecurity & hackingC, C++, Rust, Go & systems languages
Search by tags
libresslopensslopenbsdheartbleedc code quality

What people said

mrweasel · 2021-10 · Strong recommendation

Bob Beck also covers this in his talk about the first 30 days of libreSSL. The entire talk is amazing, even 7 years later. [VIDEO]

Read the original HN comment ↗
g0xA52A2A · 2023-02 · Recommendation

This exemplifies one of the key reasons OpenBSD forked OpenSSL. For those who haven't seen it I'd recommend this presentation from Bob Beck[1], around the 10 minute mark he recounts fixing issues in the memory allocator which had been reported 4 years prior. Seems there's still a similar backlog sitting behind embargoes? [1] [VIDEO]

Read the original HN comment ↗
Bayart · 2021-11 · Recommendation

The immediate effect of Heartbleed was the OpenBSD folk [1] and Google [2] forking OpenSSL. There's a talk from Bob Beck of OpenBSD on pruning OpenSSL, it's pretty hilarious [3]. In that case open source was at least able to react appropriately, even if it didn't act preemptively. [1]: [LINK] [2]: [LINK] [3]: [VIDEO]

Read the original HN comment ↗

Sources

Video by Jason Tubnor, played through YouTube.

Data and selection notes

HN summaries and labels may contain AI errors. HN dates refer to discussions, not video publication.

HN Library: HackerTube export (2026-10-31) and open-index/hacker-news. Upstream summaries and classifications may contain AI errors.

Views, duration and playback status refresh separately from the published catalog. When an update fails, existing data remains visible.

Selection checks
  • SaaS & AI candidates: Topic keywords do not match
  • Editor-approved picks: Editorial review is required

Rule matches identify candidates. They do not guarantee video quality or financial results.

About the library and its sources