If EFF claims that networking logs showed enough detail to confirm Heartbleed exploit attempts going on, then why did Codenomicon’s heartbleed.com website claim that the bug doesn’t show up in logs?
Most loggers don’t record the full contents of every packet that comes through. What Codenomicon means is the heartbleed doesn’t show up in logs under the settings typically used. Apparently EFF found some sites that record enough in their logs to notice Heartbleed.
Most loggers don’t record the full contents of every packet that comes through. What Codenomicon means is the heartbleed doesn’t show up in logs under the settings typically used. Apparently EFF found some sites that record enough in their logs to notice Heartbleed.