From owner-freebsd-questions@FreeBSD.ORG  Fri Dec 17 16:54:36 2010
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 693B81065672
	for <freebsd-questions@freebsd.org>;
	Fri, 17 Dec 2010 16:54:36 +0000 (UTC)
	(envelope-from kevin.wilcox@gmail.com)
Received: from mail-yw0-f54.google.com (mail-yw0-f54.google.com
	[209.85.213.54])
	by mx1.freebsd.org (Postfix) with ESMTP id 21D758FC14
	for <freebsd-questions@freebsd.org>;
	Fri, 17 Dec 2010 16:54:35 +0000 (UTC)
Received: by ywp6 with SMTP id 6so401498ywp.13
	for <freebsd-questions@freebsd.org>;
	Fri, 17 Dec 2010 08:54:35 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:mime-version:received:received:in-reply-to
	:references:date:message-id:subject:from:to:cc:content-type;
	bh=SmCebj4OS43n9ohTaCctCyzpA2fwZnLLlFknfnfHaKI=;
	b=DWdOUra/TI6KpdMXHBze3XYs+SPY+vgA7BOlithdIlFDX1CoH3XifmuwjUWRepSAB2
	Y0rKgbIe9qXlrF8DdhpUAM/es0b2dST7RuoehwnE4NZizz0UnxkTNjNjzCB//g0kWLzM
	UFsdc8GiaFxlLiD8wa0ufa14pPCMs38mkMiF4=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=mime-version:in-reply-to:references:date:message-id:subject:from:to
	:cc:content-type;
	b=ARoTcWSpE2b7gbLn9kHmGfcGW8OkLnybtsdQn8zZgDP0QeDyr3S29yDk+8mcAY37xt
	06zjB+2IWoI1LaR3L8HtDeQJM7HtN0IscvDfMwm4V+ZGaDzVcfedMDPgjq4CmGldBY3k
	19RWUmZdxOg34p43moYUb58Z8ADRVBEGmuvDg=
MIME-Version: 1.0
Received: by 10.91.203.6 with SMTP id f6mr2446970agq.30.1292603237526; Fri, 17
	Dec 2010 08:27:17 -0800 (PST)
Received: by 10.91.111.11 with HTTP; Fri, 17 Dec 2010 08:27:17 -0800 (PST)
In-Reply-To: <AANLkTi=aGJR7x=eCE8vmk9T4ZwJ1i0UOdcj1o53e5jBF@mail.gmail.com>
References: <AANLkTimQAZ5J5CB4ub7RAQZw93cKD6UxBaYa+U6M597Q@mail.gmail.com>
	<AANLkTikP-sF8RftgWE0JVbd2+w3QH2yiHZ1gQvgfCDBH@mail.gmail.com>
	<xeiaei9gsq35.fsf@kobe.laptop>
	<AANLkTi=aGJR7x=eCE8vmk9T4ZwJ1i0UOdcj1o53e5jBF@mail.gmail.com>
Date: Fri, 17 Dec 2010 11:27:17 -0500
Message-ID: <AANLkTimOssC99NTr7FBniob=+MU9vvcmepJngWY1E==+@mail.gmail.com>
From: Kevin Wilcox <kevin.wilcox@gmail.com>
To: jackoroses@gmail.com
Content-Type: text/plain; charset=UTF-8
Cc: FreeBSD Mailing List <freebsd-questions@freebsd.org>
Subject: Re: FreeBSD IPSec stack contains backdoors?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 17 Dec 2010 16:54:36 -0000

On 17 December 2010 10:36, Mike L <jackoroses@gmail.com> wrote:

> Reads like an unacceptable response to an issue that seems quite critical.

Here, let me re-iterate for those that may not have a copy of what
you're saying is unacceptable in front of them:

o we're aware there's talk about some projects possibly having been
compromised a decade ago

o we have ports of those projects in our project

o the code that ends up in FreeBSD from those other projects rarely
resembles the original project's code

o in the porting process, bugs may unintentionally be introduced or removed

o bugs present in the upstream project may not be found in FreeBSD's version

o people are welcome and encouraged to look at the FreeBSD code,
provide fixes and/or decide for themselves if they want to use it

What more do you want them to say? How is this is not a perfectly
reasonable response?

Cutting security-officer@ out because I'm pretty sure Colin reads this list.

kmw