From owner-freebsd-security@freebsd.org  Fri Jul 28 20:23:33 2017
Return-Path: <owner-freebsd-security@freebsd.org>
Delivered-To: freebsd-security@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id BD778DCE18C
 for <freebsd-security@mailman.ysv.freebsd.org>;
 Fri, 28 Jul 2017 20:23:33 +0000 (UTC) (envelope-from yonas@fizk.net)
Received: from mail-it0-x22a.google.com (mail-it0-x22a.google.com
 [IPv6:2607:f8b0:4001:c0b::22a])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 812686F846
 for <freebsd-security@freebsd.org>; Fri, 28 Jul 2017 20:23:33 +0000 (UTC)
 (envelope-from yonas@fizk.net)
Received: by mail-it0-x22a.google.com with SMTP id h199so102244470ith.1
 for <freebsd-security@freebsd.org>; Fri, 28 Jul 2017 13:23:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fizk.net; s=google;
 h=subject:to:references:from:message-id:date:user-agent:mime-version
 :in-reply-to:content-language;
 bh=oRwTpojVR63w3SZghqoGcE3RFfF+o2eluZ3FlWFZOuQ=;
 b=jqOnsnEAnyvGBUK7T3ip0B0zbcwsug+p3Vhs5J092wzaItu1SJwYlUdxFoiaQTLZcv
 tn7ZfubNm9KpKxJNzDuhkjP4rr6KYebNm+hxlX5DtRJu+RkQn0LZukxZfyNp7TSK+A3R
 yBqL1KidxHGcU0QR/qsM8V9mbqSR9i9NMY7P8=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:subject:to:references:from:message-id:date
 :user-agent:mime-version:in-reply-to:content-language;
 bh=oRwTpojVR63w3SZghqoGcE3RFfF+o2eluZ3FlWFZOuQ=;
 b=CI9nu+YL8ue69zLUUaaA6MLFdBnJfL+guI59yQYxSDE/LBMy7CnWmuTcbJWTGsWk68
 VIMgvroGULH5k8p3BcTLvcsuo6f36v1i927wmSXsJBZKErc3fcKlSofQcKoOCWTE+cmy
 XiZvgqFMQffikolydtBrJNeNTzjkYgQfLfiz8ELCz3tugXJ5I49Re3LplJyo+D/0AGb9
 UGj4bTKLcvTN+HS2ec0bS3LHeBLcRoomh7DfShE5IWxmTe03BUIzAjMlUxJ5sxEIhcfu
 gQGbW6MVA9Jw++wzqRDXr+3uLPeb2uC2ylUKykopudfZupqtK80HUQHmk6KBCxxBGDMW
 lBpg==
X-Gm-Message-State: AIVw110ZMP4KaI+19qk0Po5YMawHUpJLdRRfkQdTamIZazCXdPZVWZOL
 ZwKenMAL9kNBGmz7MIsCZw==
X-Received: by 10.36.29.140 with SMTP id 134mr11077602itj.121.1501273412546;
 Fri, 28 Jul 2017 13:23:32 -0700 (PDT)
Received: from [192.168.2.200]
 (CPEf0f2494a5cf3-CMf0f2494a5cf0.cpe.net.cable.rogers.com. [174.117.121.225])
 by smtp.gmail.com with ESMTPSA id k65sm8581642itk.20.2017.07.28.13.23.31
 for <freebsd-security@freebsd.org>
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Fri, 28 Jul 2017 13:23:31 -0700 (PDT)
Subject: Re: DefCon lecture BSD Kern Vulns
To: freebsd-security@freebsd.org
References: <26de0aed-8151-6105-188f-ad0c6c6cf8b8@erdgeist.org>
 <5063fa01-3ebe-7e37-41d5-c5c65c4cc78f@fizk.net>
 <CAC0r6X9XPeOvM7gzEPbonca6e6Kq0fxYG90MutDL4mw4zjs9ng@mail.gmail.com>
From: Yonas Yanfa <yonas@fizk.net>
Message-ID: <e7a8f6de-fa37-a43f-0ff0-a3c45e102a63@fizk.net>
Date: Fri, 28 Jul 2017 16:23:13 -0400
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101
 Thunderbird/52.2.1
MIME-Version: 1.0
In-Reply-To: <CAC0r6X9XPeOvM7gzEPbonca6e6Kq0fxYG90MutDL4mw4zjs9ng@mail.gmail.com>
Content-Language: en-US
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Content-Filtered-By: Mailman/MimeDel 2.1.23
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Jul 2017 20:23:33 -0000

On 07/28/2017 16:21, Luke Crooks wrote:
> I was sent a link earlier, seems to work...
>
> https://www.pdf-archive.com/2017/07/28/defcon-25-ilja-van-sprundel-bsd-kern-vulns/defcon-25-ilja-van-sprundel-bsd-kern-vulns.pdf
>
> Some great work and an enjoyable read.
>
> On 28 Jul 2017 21:02, "Yonas Yanfa" <yonas@fizk.net 
> <mailto:yonas@fizk.net>> wrote:
>
>     On 07/28/2017 08:08, Dirk Engling wrote:
>
>         Out of curiosity:
>
>         have those findings officially been reported? Is someone
>         working on them?
>
>         https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Ilja-van-Sprundel-BSD-Kern-Vulns.pdf
>         <https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Ilja-van-Sprundel-BSD-Kern-Vulns.pdf>
>
>         If not, shall I extract them?
>
>     That link doesn't work for me:
>
>     # fetch
>     "https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Ilja-van-Sprundel-BSD-Kern-Vulns.pdf
>     <https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Ilja-van-Sprundel-BSD-Kern-Vulns.pdf>"
>     No server SSL certificate
>     fetch:
>     https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Ilja-van-Sprundel-BSD-Kern-Vulns.pdf
>     <https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Ilja-van-Sprundel-BSD-Kern-Vulns.pdf>:
>     Authentication error
>
>     # fetch
>     "http://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Ilja-van-Sprundel-BSD-Kern-Vulns.pdf
>     <http://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Ilja-van-Sprundel-BSD-Kern-Vulns.pdf>"
>
>     fetch:
>     http://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Ilja-van-Sprundel-BSD-Kern-Vulns.pdf
>     <http://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Ilja-van-Sprundel-BSD-Kern-Vulns.pdf>:
>     No error: 0
>

Thanks!