Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 26 Jun 2002 10:56:46 -0600
From:      Brett Glass <brett@lariat.org>
To:        Attila Nagy <bra@fsn.hu>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: The "race" that Theo sought to avoid has begun (Was:  OpenSSH Advisory)
Message-ID:  <4.3.2.7.2.20020626105413.02275240@localhost>
In-Reply-To: <Pine.LNX.4.44.0206261845200.16380-100000@scribble.fsn.hu>
References:  <4.3.2.7.2.20020626103956.02291aa0@localhost> <4.3.2.7.2.20020626101626.02274c80@localhost> <200206261452.AAA26617@caligula.anu.edu.au> <5.1.0.14.0.20020626103651.048ec778@marble.sentex.ca> <5.1.0.14.0.20020626110043.0522ded8@marble.sentex.ca> <4.3.2.7.2.20020626101626.02274c80@localhost> <4.3.2.7.2.20020626103956.02291aa0@localhost>

next in thread | previous in thread | raw e-mail | index | archive | help
At 10:51 AM 6/26/2002, Attila Nagy wrote:

>Correct me, if I'm wrong, but people, called "script kiddies" can't really
>code. 

Some of them can. They share their scripts with the others.

>Ppl, before you are going crazy, think a little.
>Theo did you a favor when he released his letter. Why? Because now all of
>you are using privsep, 

Alas, Theo's letter said that people had until July 1 to implement
PrivSep before the details of the bug were revealed. Since many admins 
can't take whole farms of production machines down during the week, I know 
of several who were planning to implement PrivSep this coming weekend. 
The early announcement by ISS has put them and their organizations at risk.

--Brett


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.3.2.7.2.20020626105413.02275240>