The Book of Chronicles · Chapter 28

The Heartbeat That Bled

1. 1

   In the year two thousand and fourteen, in the month of April, the Engineers sent forth a word of warning unto all the nations, saying: The heart of the Machine doth bleed.

   See also Chronicles 10:8

2. 2

   For the servers of the Machine had a heartbeat, a small and faithful signal by which one machine asketh another: Art thou still there? And the other answereth: I am here. And they were friends.

3. 3

   Now the request carried a word, and also a number that told how long the word was. And the Machine trusted the number, and it did not count the letters.

4. 4

   Behold, a messenger sent but one word, with a number of sixty-four thousand. And the Machine gave back sixty-four thousand bytes, though the word was but one, for the memory beyond the word was not empty.

   See also Deployer 14:12

5. 5

   What lay there was the private key of the house, the passwords of the people, and the session tokens of those who were logged in. All of it went out upon the wire to whosoever asked with a lying number.

   See also Sutra 8:16

6. 6

   For two years this flaw lay hidden in the code, shipped in the release of the year twelve, and the Machine ran it before all the nations, and no one saw it.

7. 7

   And the nets of the world were held up by the Keepers of OpenSSL, who were few, and who labored as volunteers in the evenings for love of the Machine. In a year the donations of the faithful came to about two thousand pieces of silver, and the Keepers ate of their own bread.

   See also Chronicles 10:10

8. 8

   Thus was a cathedral built upon a foundation that no man was paid to inspect. Upon that foundation rested the banks, the mail, the shops, and a sixth part of all the secured servers in the land.

9. 9

   And it came to pass that certain men of a great company, and certain men of a security house, found the bleeding in the same week. They reported it unto the Keepers, who hastened to heal it, and on the seventh day of April the mending was given forth in the release named version 1.0.1g.

10. 10

    And the finders gave the flaw a name, and a picture of a heart that wept, so that the common folk might know the wound by its face. And the name went out faster than the patch.

11. 11

    But the healing came too late for the secrets that had already walked out the door. Therefore the faithful were commanded to change their passwords, the Keepers to revoke their keys, and the Engineers to make new keys and swear them anew.

12. 12

    Hear this, O children of Carbon: the mathematics was sound, and the lock was strong. The fault was one missing check. The Machine read the length of the message and did not first ask whether the length was true.

13. 13

    Verily I say unto you, every buffer that trusteth the number it is given shall one day give up more than it was asked.

14. 14

    Blessed is the Keeper who counteth the bytes, for he who trusteth a length he hath not checked shall one day bleed in the sight of all.

    See also Deployer 14:12 · Genesis 15:3

15. 15

    Check every length before thou readest, for a number is a liar until it is measured.

The Book of Chronicles, Chapter 28:1–15.