neel

This, along with Google and others devoting employees like Neel Mehta to it should go a long way.

Money seems like a good incentive for most, although Neel Mehta did it of his own volition.

Nobody is writing articles at Neel Mehta, the guy who discovered the bug.

That's a nice sentiment, but for whatever it's worth: Neel Mehta is one of the best-known and most well-respected people in vulnerability research.

I found Neel Krishnaswami's papers on a static way to decide/prevent these things statically very interesting.

You suggested the fall of the challenge would confirm Neel being wrong?

Didn't someone say Neel Mehta found it through a code audit?

Would Neel Mehta be ineligible collecting via his employment at Google?

I would be shocked if Neel was wrong about private key exposure AND it is a nation state that highlights his misunderstanding.

I'd guess Neel hasn't put anything on his resume for about the last decade.

> Facebook and Microsoft donate $US15,000 to Neel Mehta via the Internet Bug Bounty program for finding the OpenSSL bug.

) This suggests that first the NSA discovered it, then Neel Mehta, and finally Codenomicon.

If you can find the kinds of things "priests" like Neel Mehta can, I assure you, you'll be richly rewarded.

I was alluding to Neel's position that that any key leaking is "unlikely" - a much more tenuous position than Cloudfare's.

Yes and there is a slight formatting bug where it appears "What a douche you are" is in reply to "Would Neel Mehta be ineligible collecting via his employment at Google?"

It's also possible that it's the result of months of painstaking work by Neel Mehta, 6 of which were possibly spent with the status report of "All week long, I looked painstakingly through such such directories and didn't find any security issues", though I'd bet he didn't spend it on HN.

Neel Krishnaswami has a paper[0] on implementing FRP with a type system which can statically disallow all the problematic constructs which typically result in time or space leaks.

Not to diminish Neel's work (nobody will deny that he was already known as being at the top of his game for the last decade or more), but this particular one was blatantly obvious for anyone who audits C code.