From owner-freebsd-questions@FreeBSD.ORG Wed Sep 16 06:49:42 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 66AE1106568D for ; Wed, 16 Sep 2009 06:49:42 +0000 (UTC) (envelope-from perryh@pluto.rain.com) Received: from agora.rdrop.com (unknown [IPv6:2607:f678:1010::34]) by mx1.freebsd.org (Postfix) with ESMTP id 376568FC13 for ; Wed, 16 Sep 2009 06:49:42 +0000 (UTC) Received: from agora.rdrop.com (66@localhost [127.0.0.1]) by agora.rdrop.com (8.13.1/8.12.7) with ESMTP id n8G6neZo066255 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Tue, 15 Sep 2009 23:49:40 -0700 (PDT) (envelope-from perryh@pluto.rain.com) Received: (from uucp@localhost) by agora.rdrop.com (8.13.1/8.12.9/Submit) with UUCP id n8G6nenV066254 for freebsd-questions@freebsd.org; Tue, 15 Sep 2009 23:49:40 -0700 (PDT) Received: from fbsd61 by pluto.rain.com (4.1/SMI-4.1-pluto-M2060407) id AA11601; Tue, 15 Sep 09 23:44:19 PDT Date: Tue, 15 Sep 2009 23:47:10 -0700 From: perryh@pluto.rain.com To: freebsd-questions@freebsd.org Message-Id: <4ab089ee.pco85GKJ5xtY03wv%perryh@pluto.rain.com> References: <4AAE95B2.5050409@sitpub.com> <20090915131829.0b0a0ab7.wmoran@potentialtech.com> <20090915141317.7a41b042@scorpio.seibercom.net> <200909152051.40695.mel.flynn+fbsd.questions@mailing.thruhere.net> <20090915151425.4b6ce6f2@scorpio.seibercom.net> <4AAFEAFB.9030603@pixelhammer.com> <20090915163711.406257a6@scorpio.seibercom.net> In-Reply-To: <20090915163711.406257a6@scorpio.seibercom.net> User-Agent: nail 11.25 7/29/05 Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: Re: reporter on deadline seeks comment about reported security bug in FreeBSD X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Sep 2009 06:49:42 -0000 Jerry wrote: > Waiting until someone is harmed is tantamount to being an > accomplice to the act. And providing details of a currently-undefendable vulnerability to a black hat who did not previously know about it, thereby enabling the black hat to perpetrate harm that would otherwise not have occurred, isn't?