Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 9 Feb 2001 02:44:08 -0500 (EST)
From:      Stephen Hovey <shovey@buffnet.net>
To:        Operador del sistema <operador@nietzsche.webcaribe.net>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: FreeBSD Ports Security Advisory: FreeBSD-SA-01:INSERT_NUMBER_HERE (fwd)
Message-ID:  <Pine.BSF.4.05.10102090243560.10092-100000@buffnet11.buffnet.net>
In-Reply-To: <Pine.BSF.4.21.0102081859540.2567-100000@nietzsche.webcaribe.net>

next in thread | previous in thread | raw e-mail | index | archive | help

Cause some jerk figured out how to send a fake

On Thu, 8 Feb 2001, Operador del sistema wrote:

> anyone know why i recived this:
> ---------- Forwarded message ----------
> Date: Thu, 8 Feb 2001 15:14:26 -0500 (EST)
> From: FreeBSD Security Advisories <security-advisories@FreeBSD.ORG>
> To: freebsd-announce@FreeBSD.ORG
> Subject: FreeBSD Ports Security Advisory: FreeBSD-SA-01:INSERT_NUMBER_HERE
> 
> =============================================================================
> FreeBSD-SA-01:INSERT_NUMBER_HERE                            Security Advisory
>                                                                 FreeBSD, Inc.
> 
> Topic:          FreeBSD on record to set most advisory releases for
> 		year 2001
> 
> Category:       All
> Announced:      2001-02-07
> Credits:        sil@loopback.antioffline.com http://www.antioffline.com
> Vendor status:  Developers sleeping right now
> FreeBSD only:   Yes
> 
> I.   Background
> 
> FreeBSD is the most robust chopperating sysdumb in the world and we
> mean it. Our TCP stack will kick your TCP stacks hynee. Currently we
> are releasing an advisory every 1.95 days which means we are bound
> to surpass Microsoft.
> 
> II.  Problem Description
> 
> We normally do not assess security when creating the ports distribution
> often allowing anyone to build any program we decide to run in the ports
> directory. Recently we have noticed that we can no longer fool users
> into thinking because we provide checksumming for the programs, that
> they will be secure.
> 
> Unlinke other operating systems and the developers of them who audit
> their ports, we feel it is not our problem if someone accessess your
> system because we're too lazy to do things right the first time.
> 
> 
> III. Impact
> 
> Obviously anyone can end up control your machine or worse.
> 
> IV.  Workaround
> 
> We will not be mentioning the ultra secure OpenBSD operating system
> since we feel it is not our problem and does not help to promote a
> better OS than our own.
> 
> V.   Solution
> 
> One of the following:
> 
> 1) Rub a magic lamp and wait for the security genie to fix it.
> 
> 2) Download NSA Linux so you too can have miniscule backdoors in it
>    which you won't see.
> 
> 3) Pray to the hacker god Kevin Mitnick for assistance.
> 
> 4) Install a more secure O(penBSD)S
> 
> NOTE: FreeBSD developers are now red faced
> 
> VI. Shouts
> 
> Hard Lee Strange
> Mike Hunt
> Ivana Swallows
> Mike Hock
> Dick Famous
> Kathie Lee Gifford
> 
> 
> 
> This is the moderated mailing list freebsd-announce.
> The list contains announcements of new FreeBSD capabilities,
> important events and project milestones.
> See also the FreeBSD Web pages at http://www.freebsd.org
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-announce" in the body of the message
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.10102090243560.10092-100000>