Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-18 Thread Alex R
Mak Kolybabi wrote: On 2009-09-14 12:12, Dan Goodin wrote: We'll be writing a brief article about this. I didn't notice anyone link the finished article yet, so here it is: http://www.theregister.co.uk/2009/09/14/freebsd_security_bug/ -- Matthew Anthony Kolybabi (Mak)

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-18 Thread Reko Turja
http://www.vimeo.com/6580991 The article says that Versions 7.1 and and beyond are not vulnerable. That video contradicts that. As someone who has manipulated moving picture for fun and profit, having a video of something is a proof of nothing. For all what it's worth the OS in video might

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-18 Thread Przemyslaw Frasunek
Reko Turja pisze: As someone who has manipulated moving picture for fun and profit, having a video of something is a proof of nothing. For all what it's worth the OS in video might be FreeBSD - or even loonix made to look like FreeBSD, made vulnerable on purpose of tarring the project.

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-18 Thread Michael Powell
Przemyslaw Frasunek wrote: Giorgos Keramidas wrote: Przemyslaw should email security-officer with any details he thinks are relevant. Then the security team will make sure to fix the bug for all affected releases of FreeBSD, release a patch with the fix, issue an advisory through the usual

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-16 Thread perryh
Jerry ges...@yahoo.com wrote: Waiting until someone is harmed is tantamount to being an accomplice to the act. And providing details of a currently-undefendable vulnerability to a black hat who did not previously know about it, thereby enabling the black hat to perpetrate harm that would

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-16 Thread Jerry
On Tue, 15 Sep 2009 23:47:10 -0700 per...@pluto.rain.com wrote: Jerry ges...@yahoo.com wrote: Waiting until someone is harmed is tantamount to being an accomplice to the act. And providing details of a currently-undefendable vulnerability to a black hat who did not previously know about

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-16 Thread Paul Schmehl
--On Wednesday, September 16, 2009 06:08:50 -0500 Jerry ges...@yahoo.com wrote: On Tue, 15 Sep 2009 23:47:10 -0700 per...@pluto.rain.com wrote: Jerry ges...@yahoo.com wrote: Waiting until someone is harmed is tantamount to being an accomplice to the act. And providing details of a

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Przemyslaw Frasunek
Giorgos Keramidas wrote: Przemyslaw should email security-officer with any details he thinks are relevant. Then the security team will make sure to fix the bug for all affected releases of FreeBSD, release a patch with the fix, issue an advisory through the usual channels, and post the

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Bill Moran
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote: On Monday 14 September 2009 23:46:42 David Kelly wrote: On Mon, Sep 14, 2009 at 05:13:54PM -0400, ill...@gmail.com wrote: Am 2009/9/14 Dan Goodin dgoo...@sitpub.com writhed: Hello, Dan Goodin, a reporter at

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Mel Flynn
On Tuesday 15 September 2009 09:58:31 Przemyslaw Frasunek wrote: Giorgos Keramidas wrote: Przemyslaw should email security-officer with any details he thinks are relevant. Then the security team will make sure to fix the bug for all affected releases of FreeBSD, release a patch with the

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Giorgos Keramidas
On Tue, 15 Sep 2009 09:58:31 +0200, Przemyslaw Frasunek przemys...@frasunek.com wrote: Giorgos Keramidas wrote: Przemyslaw should email security-officer with any details he thinks are relevant. Then the security team will make sure to fix the bug for all affected releases of FreeBSD, release

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Jerry
On Tue, 15 Sep 2009 07:18:26 -0400 Bill Moran wmo...@potentialtech.com wrote: Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote: On Monday 14 September 2009 23:46:42 David Kelly wrote: On Mon, Sep 14, 2009 at 05:13:54PM -0400, ill...@gmail.com wrote: Am 2009/9/14 Dan

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Lane Holcombe
On Tue, 2009-09-15 at 10:49 -0400, Jerry wrote: On Tue, 15 Sep 2009 07:18:26 -0400 Bill Moran wmo...@potentialtech.com wrote: Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote: On Monday 14 September 2009 23:46:42 David Kelly wrote: On Mon, Sep 14, 2009 at 05:13:54PM

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Bill Moran
In response to Jerry ges...@yahoo.com: On Tue, 15 Sep 2009 07:18:26 -0400 Bill Moran wmo...@potentialtech.com wrote: Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote: On Monday 14 September 2009 23:46:42 David Kelly wrote: On Mon, Sep 14, 2009 at 05:13:54PM -0400,

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Jerry
On Tue, 15 Sep 2009 11:13:31 -0400 Bill Moran wmo...@potentialtech.com wrote: In response to Jerry ges...@yahoo.com: On Tue, 15 Sep 2009 07:18:26 -0400 Bill Moran wmo...@potentialtech.com wrote: Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote: On Monday 14

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Bill Moran
On Tue, 15 Sep 2009 13:03:50 -0400 Jerry ges...@yahoo.com wrote: On Tue, 15 Sep 2009 11:13:31 -0400 Bill Moran wmo...@potentialtech.com wrote: In response to Jerry ges...@yahoo.com: I usually discover security problems with updates I receive from http://www.us-cert.gov/. Aren't

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Jerry
On Tue, 15 Sep 2009 13:18:29 -0400 Bill Moran wmo...@potentialtech.com wrote: On Tue, 15 Sep 2009 13:03:50 -0400 Jerry ges...@yahoo.com wrote: On Tue, 15 Sep 2009 11:13:31 -0400 Bill Moran wmo...@potentialtech.com wrote: In response to Jerry ges...@yahoo.com: I usually

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Mel Flynn
On Tuesday 15 September 2009 20:13:17 Jerry wrote: On Tue, 15 Sep 2009 13:18:29 -0400 Bill Moran wmo...@potentialtech.com wrote: On Tue, 15 Sep 2009 13:03:50 -0400 Jerry ges...@yahoo.com wrote: On Tue, 15 Sep 2009 11:13:31 -0400 Bill Moran wmo...@potentialtech.com wrote: In

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread DAve
Jerry wrote: Now, if you don't like that, KISS MY ASS. I love IT mail lists! So classy. DAve -- Posterity, you will know how much it cost the present generation to preserve your freedom. I hope you will make good use of it. If you do not, I shall repent in heaven that ever I took

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Jerry
On Tue, 15 Sep 2009 20:51:40 +0200 Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote: Please inform yourself properly before assuming you're right. Mozilla does not by default publish vulnerabilities before a fix is known. In some cases publishing has been delayed by months. The

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread DAve
Jerry wrote: On Tue, 15 Sep 2009 20:51:40 +0200 Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote: Please inform yourself properly before assuming you're right. Mozilla does not by default publish vulnerabilities before a fix is known. In some cases publishing has been delayed by

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Mel Flynn
On Tuesday 15 September 2009 21:14:25 Jerry wrote: On Tue, 15 Sep 2009 20:51:40 +0200 Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote: The exception is when exploits are already in the wild and a work around is available, while a real fix will take more work. Assume that

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Jerry
On Tue, 15 Sep 2009 15:28:59 -0400 DAve dave.l...@pixelhammer.com wrote: Jerry wrote: On Tue, 15 Sep 2009 20:51:40 +0200 Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote: Please inform yourself properly before assuming you're right. Mozilla does not by default publish

reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Dan Goodin
Hello, Dan Goodin, a reporter at technology news website The Register. Security researcher Przemyslaw Frasunek says versions 6.x through 6.4 of FreeBSD has a security bug. He says he notified the FreeBSD Foundation on August 29 and never got a response. We'll be writing a brief article about

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread ill...@gmail.com
Am 2009/9/14 Dan Goodin dgoo...@sitpub.com writhed: Hello, Dan Goodin, a reporter at technology news website The Register. Security researcher Przemyslaw Frasunek says versions 6.x through 6.4 of FreeBSD has a security bug. He says he notified the FreeBSD Foundation on August 29 and never

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Mikel King
On Sep 14, 2009, at 3:12 PM, Dan Goodin wrote: Hello, Dan Goodin, a reporter at technology news website The Register. Security researcher Przemyslaw Frasunek says versions 6.x through 6.4 of FreeBSD has a security bug. He says he notified the FreeBSD Foundation on August 29 and never

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Matthew Seaman
Dan Goodin wrote: Hello, Dan Goodin, a reporter at technology news website The Register. Security researcher Przemyslaw Frasunek says versions 6.x through 6.4 of FreeBSD has a security bug. He says he notified the FreeBSD Foundation on August 29 and never got a response. We'll be writing a

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Jason
On Mon, Sep 14, 2009 at 05:21:48PM -0400, Mikel King thus spake: On Sep 14, 2009, at 3:12 PM, Dan Goodin wrote: Hello, Dan Goodin, a reporter at technology news website The Register. Security researcher Przemyslaw Frasunek says versions 6.x through 6.4 of FreeBSD has a security bug. He says

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Matthew Seaman
Mikel King wrote: Hasn't 6.x been End Of Lifed? I mean considering that 8.0 is expected to be released either later this month or early next, and 6.x will be officially retired at that time, is it possible that this was overlooked? Personally I don't think it's ever good to overlook

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Erik Trulsson
On Mon, Sep 14, 2009 at 05:21:48PM -0400, Mikel King wrote: On Sep 14, 2009, at 3:12 PM, Dan Goodin wrote: Hello, Dan Goodin, a reporter at technology news website The Register. Security researcher Przemyslaw Frasunek says versions 6.x through 6.4 of FreeBSD has a security

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread David Kelly
On Mon, Sep 14, 2009 at 05:13:54PM -0400, ill...@gmail.com wrote: Am 2009/9/14 Dan Goodin dgoo...@sitpub.com writhed: Hello, Dan Goodin, a reporter at technology news website The Register. Security researcher Przemyslaw Frasunek says versions 6.x through 6.4 of FreeBSD has a security

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Mel Flynn
On Monday 14 September 2009 23:46:42 David Kelly wrote: On Mon, Sep 14, 2009 at 05:13:54PM -0400, ill...@gmail.com wrote: Am 2009/9/14 Dan Goodin dgoo...@sitpub.com writhed: Hello, Dan Goodin, a reporter at technology news website The Register. Security researcher Przemyslaw

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Michael Powell
Matthew Seaman wrote: Mikel King wrote: Hasn't 6.x been End Of Lifed? I mean considering that 8.0 is expected to be released either later this month or early next, and 6.x will be officially retired at that time, is it possible that this was overlooked? Personally I don't think it's ever

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Mak Kolybabi
On 2009-09-14 12:12, Dan Goodin wrote: We'll be writing a brief article about this. I didn't notice anyone link the finished article yet, so here it is: http://www.theregister.co.uk/2009/09/14/freebsd_security_bug/ -- Matthew Anthony Kolybabi (Mak) m...@kolybabi.com () ASCII Ribbon Campaign |

Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Giorgos Keramidas
Hi Dan, The right place to report security problems with FreeBSD is to the Security Officer team. A PGP signed email to the email address of the security team at security-offi...@freebsd.org is enough to get the attention of the FreeBSD Project. Przemyslaw should email security-officer with any