From owner-freebsd-ports@FreeBSD.ORG Thu Dec 16 07:33:52 2004 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9AE0416A4CE for ; Thu, 16 Dec 2004 07:33:52 +0000 (GMT) Received: from pi.codefab.com (pi.codefab.com [199.103.21.227]) by mx1.FreeBSD.org (Postfix) with ESMTP id 310F543D53 for ; Thu, 16 Dec 2004 07:33:52 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from [192.168.1.3] (pool-68-160-207-47.ny325.east.verizon.net [68.160.207.47]) by pi.codefab.com (8.12.11/8.12.11) with ESMTP id iBG7XZ8k087924 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 16 Dec 2004 02:33:47 -0500 (EST) Message-ID: <41C13A4F.40507@mac.com> Date: Thu, 16 Dec 2004 02:33:35 -0500 From: Chuck Swiger Organization: The Courts of Chaos User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Edwin Groothuis References: <20041216010359.51904.qmail@web51604.mail.yahoo.com> <20041216065953.GH1435@k7.mavetju> In-Reply-To: <20041216065953.GH1435@k7.mavetju> X-Enigmail-Version: 0.89.5.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=1.8 required=5.5 tests=RCVD_IN_NJABL_DUL, RCVD_IN_SORBS_DUL autolearn=disabled version=3.0.1 X-Spam-Level: * X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on pi.codefab.com cc: freebsd-ports@FreeBSD.org Subject: Re: Security Exploits found in FreeBSD 4.10's ports tree. X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Dec 2004 07:33:52 -0000 Edwin Groothuis wrote: [ ... ] > Another reason not to compile assembler sourcecode you get mailed > from unknown sources with devel/nasm: I always knew it would bite > me in the ankles! Heh heh... Although, if you connect your program to a really good source of Brownian motion^W^W ...err, entropy, like what happens when you feed undergrad students to the program (or vice versa?), unexpected changes in probability will occur, and you might actually find yourself using nasm as your email postprocessor. Anyway, I'm pretty sure that's not too far from what SpamAssassin and its Bayesian word-munger thingy already is doing to spam email. Bah! Only difference is that SPAM can't even be trusted to be a decent source of entropy.... -- -Chuck "Probability ratio 1:1. We have achieved normality. Whatever you can't deal with is now therefore your own problem."