01
Debian OpenSSL 2008: The Two-Line Patch That Collapsed Cryptographic Entropy
Debian's attempt to quiet Valgrind warnings in OpenSSL removed entropy from the random-number generator, leaving years of cryptographic keys drawn from a tiny predictable space.
↗