<story><title>Were Intelligence Agencies Using Heartbleed in November 2013?</title><url>https://www.eff.org/deeplinks/2014/04/wild-heart-were-intelligence-agencies-using-heartbleed-november-2013</url></story><parent_chain></parent_chain><comment><author>unhush</author><text>I helped write this post. Note that we&amp;#x27;re very interested in anyone who has been keeping raw packet logs from before the Heartbleed vuln. was public. If you find 18 03 (01 | 02 | 03) 00 03 01 in them, please let me know or post pcap files. Contact info: &lt;a href=&quot;https://www.eff.org/about/staff/yan-zhu&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.eff.org&amp;#x2F;about&amp;#x2F;staff&amp;#x2F;yan-zhu&lt;/a&gt;</text></comment>
<story><title>Were Intelligence Agencies Using Heartbleed in November 2013?</title><url>https://www.eff.org/deeplinks/2014/04/wild-heart-were-intelligence-agencies-using-heartbleed-november-2013</url></story><parent_chain></parent_chain><comment><author>ScottBurson</author><text>This would be so easy for the NSA etc. to do that I think we have to consider it as inevitably having occurred.&lt;p&gt;All they would have had to do is take a close look at any new changes committed to OpenSSL and other critical infrastructure software.  Surely they have people doing that -- they would be remiss not to.</text></comment>