Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 14 Jul 2000 17:04:46 -0700 (PDT)
From:      Mike Hoskins <mike@adept.org>
To:        Warner Losh <imp@village.org>
Cc:        Paul Robinson <wigstah@akitanet.co.uk>, Neil Blakey-Milner <nbm@mithrandr.moria.org>, David Pick <D.M.Pick@qmw.ac.uk>, security@FreeBSD.ORG
Subject:   Re: Displacement of Blame[tm] 
Message-ID:  <Pine.BSF.4.21.0007141651270.12329-100000@snafu.adept.org>
In-Reply-To: <200007142328.RAA39908@harmony.village.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 14 Jul 2000, Warner Losh wrote:

> : I like it.  Has this already been proposed and dismissed?  If so,
> : why?  Sounds good to me.  I can subscribe to both lists, and those who
> : don't want ports advisories won't have to see them.
> 
> I don't think it woudl work.  Bugtraq would subscribe to both of them
> and Brett's clients would still be concerned.

Fair enough.

Then I'll resort to my first thought...  I site an example from the recent
BitchX advisory:

<quote>
 Topic:          bitchx port contains client-side vulnerability
<snip>
 FreeBSD only:   NO
<snip>
 The bitchx port is not installed by default, nor is it "part of
 FreeBSD"
</quote>

Now...  Maybe manager-types are getting confused or maybe someone is
misunderstanding the meaning of 'port', but given the above SA format, it
would seem such confusion is the result of an inability to read.

So, for those touting this as someting in dire need of everyone's
attention, I'd propose investing in a copy of 'Hooked on Phonics'.  Give
that to your managers, and anyone else who is confused...  Then, once they
can actually read, they'll be able to benefit from the hard work done by
the FreeBSD Security team.

Meanwhile (being a NetOps manager for an ASP using FreeBSD), I'm glad
myself and my manager types can read.  If they couldn't, I'd work
somewhere else...  as that inability isn't something I'd trust my future
with in the first place.

Rant on...

-mrh



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0007141651270.12329-100000>