From owner-freebsd-stable@FreeBSD.ORG Mon Apr 2 17:08:58 2012 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 048A8106566B for ; Mon, 2 Apr 2012 17:08:58 +0000 (UTC) (envelope-from jim@ohlste.in) Received: from mail-qa0-f54.google.com (mail-qa0-f54.google.com [209.85.216.54]) by mx1.freebsd.org (Postfix) with ESMTP id 9C5CF8FC12 for ; Mon, 2 Apr 2012 17:08:56 +0000 (UTC) Received: by qao25 with SMTP id 25so2021840qao.13 for ; Mon, 02 Apr 2012 10:08:55 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding :x-gm-message-state; bh=Y3NnXh9N5O61+99ZDqcoqSH3fpTR52P+KwQBQVmmoZk=; b=UnBD+isCc6ZE/Tg7Jdx0aHNLvZPd2cZonppyoGo5/RjJkdGtBDwdS8OKlNbaauPs+/ tn6uQUxgRyzrRIC8lQ5Ocw0VQs+9TEbUesyzMjwpkzI2pxz+Md/nJqUe1Q/BicK6IZCJ nRwm9nynEjdEgYy/R2YMaiQwpk7gycqli1YlVznH5Hz0QF6tsAq4xTSnU4g1eK/Samat t/Vux6EE23/MTec+gf9odkdcwtZtHjMUfq9jDRLCoFC7yOiBz+Bg/VfN7p7EP01yqfz0 N1kFrmSgem0c2pSZ7wug4Q0E/MeLwBuJXTgjZT2NdQkzupOIWoYsyg311brScI1WlPxN kSlQ== Received: by 10.224.35.130 with SMTP id p2mr2566079qad.32.1333386535773; Mon, 02 Apr 2012 10:08:55 -0700 (PDT) Received: from jims-iMac.local (pool-108-39-82-70.nrflva.fios.verizon.net. [108.39.82.70]) by mx.google.com with ESMTPS id ha3sm35500113qab.13.2012.04.02.10.08.53 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 02 Apr 2012 10:08:54 -0700 (PDT) Message-ID: <4F79DD24.2010000@ohlste.in> Date: Mon, 02 Apr 2012 13:08:52 -0400 From: Jim Ohlstein User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:11.0) Gecko/20120313 Thunderbird/11.0 MIME-Version: 1.0 To: freebsd-stable@freebsd.org References: <4F75E404.8000104@cs.stonybrook.edu> <4F75EF86.6090909@cs.stonybrook.edu> <20120330190713.GG2358@deviant.kiev.zoral.com.ua> <4F760C9E.6060405@cs.stonybrook.edu> <20120330194649.GH2358@deviant.kiev.zoral.com.ua> <4F761371.7020606@cs.stonybrook.edu> <20120330203605.GI2358@deviant.kiev.zoral.com.ua> <4F76350F.8000708@cs.stonybrook.edu> <20120330224631.GJ2358@deviant.kiev.zoral.com.ua> <4F7637F3.2060502@cs.stonybrook.edu> <4F766F29.2030803@cs.stonybrook.edu> <4F79D88B.3040102@cs.stonybrook.edu> In-Reply-To: <4F79D88B.3040102@cs.stonybrook.edu> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Gm-Message-State: ALoCoQmML4wtxFRoOIn6ShDIM4/wz07nKjlcqaWGJyr/fkOPgguk4ykserN76tmwyl/+tT3mUNRM Cc: Richard Yao Subject: Re: Text relocations in kernel modules X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Apr 2012 17:08:58 -0000 On 4/2/12 12:49 PM, Richard Yao wrote: > On 04/02/12 05:56, Tom Evans wrote: >> On Sat, Mar 31, 2012 at 3:42 AM, Richard Yao wrote: >>>> There are no security implications, no system resources to be wasted. >>>> >>>> And if you think there are security implications, then lets see a >>>> proof-of-concept. >>> >>> If I find time to write a proof-of-concept, I promise to publish it >>> publicly. Your security team will find out when everyone else does. >> >> Richard, I'm not sure what you are trying to accomplish here. You have >> had a clear explanation of why certain things are done in a certain >> way in the FreeBSD codebase, and a confirmation that they do not think >> it causes any security issues in FreeBSD. >> >> Your response is to threaten to write an exploit against FreeBSD, and >> distribute it publicly before disclosing to security@. > > Some people believe that projects that do not take proper > countermeasures against security vulnerabilities do not deserve to have > special notification of issues. I happen to be one of them. Wow. You're not only an ass, you're a pompous ass. > >> Are you trying to be an ass? Someone disagrees with you on the >> internet, so you throw all the toys out the pram? > > I suggest that you look at things from my perspective. I asked a simple > question on your mailing list. I then received several private emails > from various FreeBSD developers insulting my intelligence for the act of > asking a question. Who is the "ass" here? > See above. Or... look in the mirror. -- Jim Ohlstein