Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 02 Apr 2012 13:08:52 -0400
From:      Jim Ohlstein <jim@ohlste.in>
To:        freebsd-stable@freebsd.org
Cc:        Richard Yao <ryao@cs.stonybrook.edu>
Subject:   Re: Text relocations in kernel modules
Message-ID:  <4F79DD24.2010000@ohlste.in>
In-Reply-To: <4F79D88B.3040102@cs.stonybrook.edu>
References:  <4F75E404.8000104@cs.stonybrook.edu> <4F75EF86.6090909@cs.stonybrook.edu> <20120330190713.GG2358@deviant.kiev.zoral.com.ua> <4F760C9E.6060405@cs.stonybrook.edu> <20120330194649.GH2358@deviant.kiev.zoral.com.ua> <4F761371.7020606@cs.stonybrook.edu> <20120330203605.GI2358@deviant.kiev.zoral.com.ua> <4F76350F.8000708@cs.stonybrook.edu> <20120330224631.GJ2358@deviant.kiev.zoral.com.ua> <4F7637F3.2060502@cs.stonybrook.edu> <CAGE5yCpuvsVrc-%2BDTVas-W4fjuP2s%2B6PQONMOTyEbGnj2CY3ig@mail.gmail.com> <4F766F29.2030803@cs.stonybrook.edu> <CAFHbX1KiZx68MP4bCAvPc0Zui3fA4O35_z3kP781zoJqLYp7Bw@mail.gmail.com> <4F79D88B.3040102@cs.stonybrook.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
On 4/2/12 12:49 PM, Richard Yao wrote:
> On 04/02/12 05:56, Tom Evans wrote:
>> On Sat, Mar 31, 2012 at 3:42 AM, Richard Yao <ryao@cs.stonybrook.edu> wrote:
>>>> There are no security implications, no system resources to be wasted.
>>>>
>>>> And if you think there are security implications, then lets see a
>>>> proof-of-concept.
>>>
>>> If I find time to write a proof-of-concept, I promise to publish it
>>> publicly. Your security team will find out when everyone else does.
>>
>> Richard, I'm not sure what you are trying to accomplish here. You have
>> had a clear explanation of why certain things are done in a certain
>> way in the FreeBSD codebase, and a confirmation that they do not think
>> it causes any security issues in FreeBSD.
>>
>> Your response is to threaten to write an exploit against FreeBSD, and
>> distribute it publicly before disclosing to security@.
> 
> Some people believe that projects that do not take proper
> countermeasures against security vulnerabilities do not deserve to have
> special notification of issues. I happen to be one of them.

Wow. You're not only an ass, you're a pompous ass.

> 
>> Are you trying to be an ass? Someone disagrees with you on the
>> internet, so you throw all the toys out the pram?
> 
> I suggest that you look at things from my perspective. I asked a simple
> question on your mailing list. I then received several private emails
> from various FreeBSD developers insulting my intelligence for the act of
> asking a question. Who is the "ass" here?
> 

See above. Or... look in the mirror.

-- 
Jim Ohlstein



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4F79DD24.2010000>