[dsantos]

de Raadt: "We've been auditing since the mail came in! We have already found two bugs in our cryptographic code. We are assessing the impact."

http://www.itwire.com/opinion-and-analysis/open-sauce/43995-...

"Until 2 days ago I had no idea that both Jason and Angelos in the past did work for a company that does that business"

[tptacek]

There is no way Theo didn't know Jason worked at NETSEC; Jason's a co-author of an academic paper about the OpenBSD cryptography implementation, under a NETSEC address.

[dsantos]

yep, you can see this post from 2000. http://monkey.org/openbsd/archive/misc/0004/msg00583.html

[m0nastic]

I think this followup is even more illustrative: http://monkey.org/openbsd/archive/misc/0004/msg00573.html

[tedunangst]

rest of quote: "And it is true, wow, that company really was in that business! Now they (the company) belong to Verizon."

What the company did is surprising, not who worked there.

[tptacek]

I assume you mean "what the company is alleged, by one guy, to have done".

[tedunangst]

Sure. I was saying "no idea" == "that business" as opposed to the "no idea" == "jason and angelos" interpretation.