From owner-freebsd-security@freebsd.org Fri Jul 28 20:01:53 2017 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 75764DCD86D for ; Fri, 28 Jul 2017 20:01:53 +0000 (UTC) (envelope-from yonas@fizk.net) Received: from mail-io0-x229.google.com (mail-io0-x229.google.com [IPv6:2607:f8b0:4001:c06::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 42ED06EA77 for ; Fri, 28 Jul 2017 20:01:53 +0000 (UTC) (envelope-from yonas@fizk.net) Received: by mail-io0-x229.google.com with SMTP id c74so93613716iod.4 for ; Fri, 28 Jul 2017 13:01:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fizk.net; s=google; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language; bh=MOPO5VqD7U7XiDeB195V4FyPlAqlV0zDPQATQM4PtHI=; b=LT4RoLOCkhmx1VoQlyHgKzEgXdDIATt1agxM/9Oy8VsUL1Xyz+CQXm2TF1YbxIV1Dd nN5gIbS16Q78cL6oCph3MwwAZWH4MsMRRekCBV9gsrAocIFw78mcsB9vJ2zSvXQa7dWH PYPohEbXw7+VIljDNWEwQf81S3kgY9EqUaDQg= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language; bh=MOPO5VqD7U7XiDeB195V4FyPlAqlV0zDPQATQM4PtHI=; b=lOvosxIza0cffR+Q09ivlRtNbaSLrC7sKh5U0kEDB5a5CF5hkb9heSXTCcmsHcOYmM iCgVp8Z/L+EcUKze9Pzn6VOuvU4XU5lG9jBkMRI+L4LrYaTGYsxTo0oFcOWKqHKMEM4X RvFWKHSGmZ/KbIKkUTqfu8a0dOq7rUrggPQyNqLRCZRpWaXLwZiHEPUbA0w9ONhp2GQ/ BmhHDnVfLEP4Mnqia1Gkh+7nYZeuldKvUwZ+8HU1yFMx2PNRNfMKCbWvPtEuLntA4t4H y96/X9WGfRX58RFTbjCmICc1trveXlKWZlEGGW0R+HqN0tYtdGPl+T8qfGIGJ7f5aP6C EqLA== X-Gm-Message-State: AIVw112nsJSwXoMqaXFBh9GS1tSZX1jK8VPAXiJ3Vr1wMmjTHrGkcI58 spjaB2RkaXi4gloXP7PmCg== X-Received: by 10.107.56.214 with SMTP id f205mr10914208ioa.208.1501272112228; Fri, 28 Jul 2017 13:01:52 -0700 (PDT) Received: from [192.168.2.200] (CPEf0f2494a5cf3-CMf0f2494a5cf0.cpe.net.cable.rogers.com. [174.117.121.225]) by smtp.gmail.com with ESMTPSA id o8sm10673302ioo.56.2017.07.28.13.01.50 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 28 Jul 2017 13:01:51 -0700 (PDT) Subject: Re: DefCon lecture BSD Kern Vulns To: freebsd-security@freebsd.org References: <26de0aed-8151-6105-188f-ad0c6c6cf8b8@erdgeist.org> From: Yonas Yanfa Message-ID: <5063fa01-3ebe-7e37-41d5-c5c65c4cc78f@fizk.net> Date: Fri, 28 Jul 2017 16:01:32 -0400 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 In-Reply-To: <26de0aed-8151-6105-188f-ad0c6c6cf8b8@erdgeist.org> Content-Language: en-US Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Jul 2017 20:01:53 -0000 On 07/28/2017 08:08, Dirk Engling wrote: > Out of curiosity: > > have those findings officially been reported? Is someone working on them? > > https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Ilja-van-Sprundel-BSD-Kern-Vulns.pdf > > If not, shall I extract them? > That link doesn't work for me: # fetch "https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Ilja-van-Sprundel-BSD-Kern-Vulns.pdf" No server SSL certificate fetch: https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Ilja-van-Sprundel-BSD-Kern-Vulns.pdf: Authentication error # fetch "http://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Ilja-van-Sprundel-BSD-Kern-Vulns.pdf" fetch: http://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Ilja-van-Sprundel-BSD-Kern-Vulns.pdf: No error: 0 -- Yonas Yanfa In Love With Open Source Drupal :: GitHub :: Mozilla fizk.net | yonas@fizk.net