Mak Kolybabi wrote:
On 2009-09-14 12:12, Dan Goodin wrote:
We'll be writing a brief article about this.
I didn't notice anyone link the finished article yet, so here it is:
http://www.theregister.co.uk/2009/09/14/freebsd_security_bug/
--
Matthew Anthony Kolybabi (Mak)
http://www.vimeo.com/6580991
The article says that Versions 7.1 and and beyond are not
vulnerable. That video contradicts that.
As someone who has manipulated moving picture for fun and profit,
having a video of something is a proof of nothing. For all what it's
worth the OS in video might
Reko Turja pisze:
As someone who has manipulated moving picture for fun and profit, having
a video of something is a proof of nothing. For all what it's worth the
OS in video might be FreeBSD - or even loonix made to look like FreeBSD,
made vulnerable on purpose of tarring the project.
Przemyslaw Frasunek wrote:
Giorgos Keramidas wrote:
Przemyslaw should email security-officer with any details he thinks are
relevant. Then the security team will make sure to fix the bug for all
affected releases of FreeBSD, release a patch with the fix, issue an
advisory through the usual
Jerry ges...@yahoo.com wrote:
Waiting until someone is harmed is tantamount to being an
accomplice to the act.
And providing details of a currently-undefendable vulnerability
to a black hat who did not previously know about it, thereby
enabling the black hat to perpetrate harm that would
On Tue, 15 Sep 2009 23:47:10 -0700
per...@pluto.rain.com wrote:
Jerry ges...@yahoo.com wrote:
Waiting until someone is harmed is tantamount to being an
accomplice to the act.
And providing details of a currently-undefendable vulnerability
to a black hat who did not previously know about
--On Wednesday, September 16, 2009 06:08:50 -0500 Jerry ges...@yahoo.com
wrote:
On Tue, 15 Sep 2009 23:47:10 -0700
per...@pluto.rain.com wrote:
Jerry ges...@yahoo.com wrote:
Waiting until someone is harmed is tantamount to being an
accomplice to the act.
And providing details of a
Giorgos Keramidas wrote:
Przemyslaw should email security-officer with any details he thinks are
relevant. Then the security team will make sure to fix the bug for all
affected releases of FreeBSD, release a patch with the fix, issue an
advisory through the usual channels, and post the
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
On Monday 14 September 2009 23:46:42 David Kelly wrote:
On Mon, Sep 14, 2009 at 05:13:54PM -0400, ill...@gmail.com wrote:
Am 2009/9/14 Dan Goodin dgoo...@sitpub.com writhed:
Hello,
Dan Goodin, a reporter at
On Tuesday 15 September 2009 09:58:31 Przemyslaw Frasunek wrote:
Giorgos Keramidas wrote:
Przemyslaw should email security-officer with any details he thinks are
relevant. Then the security team will make sure to fix the bug for all
affected releases of FreeBSD, release a patch with the
On Tue, 15 Sep 2009 09:58:31 +0200, Przemyslaw Frasunek
przemys...@frasunek.com wrote:
Giorgos Keramidas wrote:
Przemyslaw should email security-officer with any details he thinks are
relevant. Then the security team will make sure to fix the bug for all
affected releases of FreeBSD, release
On Tue, 15 Sep 2009 07:18:26 -0400
Bill Moran wmo...@potentialtech.com wrote:
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
On Monday 14 September 2009 23:46:42 David Kelly wrote:
On Mon, Sep 14, 2009 at 05:13:54PM -0400, ill...@gmail.com wrote:
Am 2009/9/14 Dan
On Tue, 2009-09-15 at 10:49 -0400, Jerry wrote:
On Tue, 15 Sep 2009 07:18:26 -0400
Bill Moran wmo...@potentialtech.com wrote:
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
On Monday 14 September 2009 23:46:42 David Kelly wrote:
On Mon, Sep 14, 2009 at 05:13:54PM
In response to Jerry ges...@yahoo.com:
On Tue, 15 Sep 2009 07:18:26 -0400
Bill Moran wmo...@potentialtech.com wrote:
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
On Monday 14 September 2009 23:46:42 David Kelly wrote:
On Mon, Sep 14, 2009 at 05:13:54PM -0400,
On Tue, 15 Sep 2009 11:13:31 -0400
Bill Moran wmo...@potentialtech.com wrote:
In response to Jerry ges...@yahoo.com:
On Tue, 15 Sep 2009 07:18:26 -0400
Bill Moran wmo...@potentialtech.com wrote:
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
On Monday 14
On Tue, 15 Sep 2009 13:03:50 -0400
Jerry ges...@yahoo.com wrote:
On Tue, 15 Sep 2009 11:13:31 -0400
Bill Moran wmo...@potentialtech.com wrote:
In response to Jerry ges...@yahoo.com:
I usually discover security problems with updates I receive from
http://www.us-cert.gov/. Aren't
On Tue, 15 Sep 2009 13:18:29 -0400
Bill Moran wmo...@potentialtech.com wrote:
On Tue, 15 Sep 2009 13:03:50 -0400
Jerry ges...@yahoo.com wrote:
On Tue, 15 Sep 2009 11:13:31 -0400
Bill Moran wmo...@potentialtech.com wrote:
In response to Jerry ges...@yahoo.com:
I usually
On Tuesday 15 September 2009 20:13:17 Jerry wrote:
On Tue, 15 Sep 2009 13:18:29 -0400
Bill Moran wmo...@potentialtech.com wrote:
On Tue, 15 Sep 2009 13:03:50 -0400
Jerry ges...@yahoo.com wrote:
On Tue, 15 Sep 2009 11:13:31 -0400
Bill Moran wmo...@potentialtech.com wrote:
In
Jerry wrote:
Now, if you don't like that, KISS MY ASS.
I love IT mail lists! So classy.
DAve
--
Posterity, you will know how much it cost the present generation to
preserve your freedom. I hope you will make good use of it. If you
do not, I shall repent in heaven that ever I took
On Tue, 15 Sep 2009 20:51:40 +0200
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
Please inform yourself properly before assuming you're right. Mozilla
does not by default publish vulnerabilities before a fix is known. In
some cases publishing has been delayed by months. The
Jerry wrote:
On Tue, 15 Sep 2009 20:51:40 +0200
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
Please inform yourself properly before assuming you're right. Mozilla
does not by default publish vulnerabilities before a fix is known. In
some cases publishing has been delayed by
On Tuesday 15 September 2009 21:14:25 Jerry wrote:
On Tue, 15 Sep 2009 20:51:40 +0200
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
The exception is
when exploits are already in the wild and a work around is available,
while a real fix will take more work.
Assume that
On Tue, 15 Sep 2009 15:28:59 -0400
DAve dave.l...@pixelhammer.com wrote:
Jerry wrote:
On Tue, 15 Sep 2009 20:51:40 +0200
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
Please inform yourself properly before assuming you're right.
Mozilla does not by default publish
Hello,
Dan Goodin, a reporter at technology news website The Register. Security
researcher Przemyslaw Frasunek says versions 6.x through 6.4 of FreeBSD
has a security bug. He says he notified the FreeBSD Foundation on August
29 and never got a response. We'll be writing a brief article about
Am 2009/9/14 Dan Goodin dgoo...@sitpub.com writhed:
Hello,
Dan Goodin, a reporter at technology news website The Register. Security
researcher Przemyslaw Frasunek says versions 6.x through 6.4 of FreeBSD
has a security bug. He says he notified the FreeBSD Foundation on August
29 and never
On Sep 14, 2009, at 3:12 PM, Dan Goodin wrote:
Hello,
Dan Goodin, a reporter at technology news website The Register.
Security
researcher Przemyslaw Frasunek says versions 6.x through 6.4 of
FreeBSD
has a security bug. He says he notified the FreeBSD Foundation on
August
29 and never
Dan Goodin wrote:
Hello,
Dan Goodin, a reporter at technology news website The Register. Security
researcher Przemyslaw Frasunek says versions 6.x through 6.4 of FreeBSD
has a security bug. He says he notified the FreeBSD Foundation on August
29 and never got a response. We'll be writing a
On Mon, Sep 14, 2009 at 05:21:48PM -0400, Mikel King thus spake:
On Sep 14, 2009, at 3:12 PM, Dan Goodin wrote:
Hello,
Dan Goodin, a reporter at technology news website The Register.
Security
researcher Przemyslaw Frasunek says versions 6.x through 6.4 of
FreeBSD
has a security bug. He says
Mikel King wrote:
Hasn't 6.x been End Of Lifed? I mean considering that 8.0 is expected to
be released either later this month or early next, and 6.x will be
officially retired at that time, is it possible that this was
overlooked? Personally I don't think it's ever good to overlook
On Mon, Sep 14, 2009 at 05:21:48PM -0400, Mikel King wrote:
On Sep 14, 2009, at 3:12 PM, Dan Goodin wrote:
Hello,
Dan Goodin, a reporter at technology news website The Register.
Security
researcher Przemyslaw Frasunek says versions 6.x through 6.4 of
FreeBSD
has a security
On Mon, Sep 14, 2009 at 05:13:54PM -0400, ill...@gmail.com wrote:
Am 2009/9/14 Dan Goodin dgoo...@sitpub.com writhed:
Hello,
Dan Goodin, a reporter at technology news website The Register. Security
researcher Przemyslaw Frasunek says versions 6.x through 6.4 of FreeBSD
has a security
On Monday 14 September 2009 23:46:42 David Kelly wrote:
On Mon, Sep 14, 2009 at 05:13:54PM -0400, ill...@gmail.com wrote:
Am 2009/9/14 Dan Goodin dgoo...@sitpub.com writhed:
Hello,
Dan Goodin, a reporter at technology news website The Register.
Security researcher Przemyslaw
Matthew Seaman wrote:
Mikel King wrote:
Hasn't 6.x been End Of Lifed? I mean considering that 8.0 is expected to
be released either later this month or early next, and 6.x will be
officially retired at that time, is it possible that this was
overlooked? Personally I don't think it's ever
On 2009-09-14 12:12, Dan Goodin wrote:
We'll be writing a brief article about this.
I didn't notice anyone link the finished article yet, so here it is:
http://www.theregister.co.uk/2009/09/14/freebsd_security_bug/
--
Matthew Anthony Kolybabi (Mak)
m...@kolybabi.com
() ASCII Ribbon Campaign |
Hi Dan,
The right place to report security problems with FreeBSD is to the
Security Officer team. A PGP signed email to the email address of the
security team at security-offi...@freebsd.org is enough to get the
attention of the FreeBSD Project.
Przemyslaw should email security-officer with any
35 matches
Mail list logo