<story><title>OpenSSH sshd – memory leak</title><url>http://pastebin.com/raw.php?i=gjkivAf3</url></story><parent_chain></parent_chain><comment><author>jwcrux</author><text>This is garbage. Probably the same guys behind this other one recently (&lt;a href=&quot;http://pastebin.com/qPxR9BRv&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;pastebin.com&amp;#x2F;qPxR9BRv&lt;/a&gt;).&lt;p&gt;One of the members of the full disclosure mailing list outed these guys here: &lt;a href=&quot;http://seclists.org/fulldisclosure/2014/Apr/292&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;seclists.org&amp;#x2F;fulldisclosure&amp;#x2F;2014&amp;#x2F;Apr&amp;#x2F;292&lt;/a&gt;&lt;p&gt;Only this time - they got &lt;i&gt;smart&lt;/i&gt;:&lt;p&gt;&amp;gt; Please note that we are busy and we will NOT answer to questions, social
engineering tentatives or dumb comments.&lt;p&gt;AKA&lt;p&gt;&amp;gt; Please note that we will not in any way prove this is legit (not falling for that again!)</text></comment>
<story><title>OpenSSH sshd – memory leak</title><url>http://pastebin.com/raw.php?i=gjkivAf3</url></story><parent_chain></parent_chain><comment><author>reedloden</author><text>Folks on oss-security are skeptical about this (and rightly so, since posts like this have been showing up regularly since heartbleed). &lt;a href=&quot;http://seclists.org/oss-sec/2014/q2/246&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;seclists.org&amp;#x2F;oss-sec&amp;#x2F;2014&amp;#x2F;q2&amp;#x2F;246&lt;/a&gt;</text></comment>