From owner-freebsd-questions@freebsd.org Wed Jul 15 06:13:07 2015 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6E0679A224C for ; Wed, 15 Jul 2015 06:13:07 +0000 (UTC) (envelope-from freebsd-questions@m.gmane.org) Received: from plane.gmane.org (plane.gmane.org [80.91.229.3]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 3042810A6 for ; Wed, 15 Jul 2015 06:13:06 +0000 (UTC) (envelope-from freebsd-questions@m.gmane.org) Received: from list by plane.gmane.org with local (Exim 4.69) (envelope-from ) id 1ZFFwG-0003Da-8a for freebsd-questions@freebsd.org; Wed, 15 Jul 2015 08:13:04 +0200 Received: from pool-72-66-1-32.washdc.fios.verizon.net ([72.66.1.32]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 15 Jul 2015 08:13:04 +0200 Received: from nightrecon by pool-72-66-1-32.washdc.fios.verizon.net with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 15 Jul 2015 08:13:04 +0200 X-Injected-Via-Gmane: http://gmane.org/ To: freebsd-questions@freebsd.org From: Michael Powell Subject: Re: another NSA leak: Network security code appears on GitHub Date: Wed, 15 Jul 2015 02:12:50 -0400 Lines: 34 Message-ID: References: <55A59451.6030900@gmail.com> Reply-To: nightrecon@hotmail.com Mime-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 7Bit X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: pool-72-66-1-32.washdc.fios.verizon.net X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Jul 2015 06:13:07 -0000 jd1008 wrote: [snip] > So, who on FBSD dev team is scanning the kernel, compilers, C/C++ > libraries, application and app libraries for security ? https://www.freebsd.org/doc/en_US.ISO8859-1/articles/committers-guide/coverity.html https://scan.coverity.com/projects/317 http://www.coverity.com/press-releases/press_story58_05_20_08/ > I do not think anyone is. It is an absolutely daunting task. You would be mistaken. By way of an example, or two: http://hardenedbsd.org/ https://opnsense.org/ > It is the state of the world today. Yep. So many people who simply cannot read. Then they get on the IntarWebZ and attempt writing, spouting off about so much they know so little about. > So incredibly unfortunate. So is uninformed trolling. Get some clue. Then your trolling can become entertainment. I'm certain the 'Never Say Anything' crowd will get a good laugh. -Mike