Date: Fri, 29 Mar 2002 15:58:04 -0800 From: Benjamin Krueger <benjamin@macguire.net> To: Rahul Siddharthan <rsidd@online.fr> Cc: Terry Lambert <tlambert2@mindspring.com>, chat@freebsd.org Subject: Re: qmail (Was: Maintaining Access Control Lists ) Message-ID: <20020329155804.A7895@rain.macguire.net> In-Reply-To: <20020329235014.GA1609@lpt.ens.fr>; from rsidd@online.fr on Sat, Mar 30, 2002 at 12:50:14AM %2B0100 References: <3CA4FA19.F72624A0@mindspring.com> <20020329235014.GA1609@lpt.ens.fr>
next in thread | previous in thread | raw e-mail | index | archive | help
* Rahul Siddharthan (rsidd@online.fr) [020329 15:50]: > Terry Lambert wrote: > > Dan was wrong to claim that it wasn't a bug (I can see his reasons > > for wanting to make this claim, given his "posted reward" thing), > > Um, that reward is specifically for security holes, not for any old > bug: > > http://cr.yp.to/djbdns/guarantee.html > > The same with qmail -- > http://cr.yp.to/qmail/guarantee.html Its a charlatan's promise. He fails to define security, or bug, or anything else really, and retains the right to define it at a later time (preferably after you've already reported it). If a company were to offer to pay you for your services in finding bugs, but not define bug or security, and after many years nobody was ever able to get a successful claim out of them despite getting many submissions, it would be called Fraud. -- Benjamin Krueger "Life is far too important a thing ever to talk seriously about." - Oscar Wilde (1854 - 1900) ---------------------------------------------------------------- Send mail w/ subject 'send public key' or query for (0x251A4B18) Fingerprint = A642 F299 C1C1 C828 F186 A851 CFF0 7711 251A 4B18 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-chat" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020329155804.A7895>