From owner-freebsd-security@FreeBSD.ORG  Fri Dec 23 22:41:19 2011
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 4DF34106566C;
	Fri, 23 Dec 2011 22:41:19 +0000 (UTC)
	(envelope-from oliver.pntr@gmail.com)
Received: from mail-yw0-f54.google.com (mail-yw0-f54.google.com
	[209.85.213.54])
	by mx1.freebsd.org (Postfix) with ESMTP id F21708FC18;
	Fri, 23 Dec 2011 22:41:18 +0000 (UTC)
Received: by yhfq46 with SMTP id q46so7818866yhf.13
	for <multiple recipients>; Fri, 23 Dec 2011 14:41:18 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=mime-version:in-reply-to:references:date:message-id:subject:from:to
	:cc:content-type;
	bh=Ai6s+nfZLWrwBWnWNre70S4jc/Wx1Ep/7Wae1EaQ3r4=;
	b=Zomga0miNlv5M2tMoiCaWB+vYSfD9vGD+9/Jj4qjL7eCKFCWrJn9CS8GNueUtIvmcN
	Atj6yjqSeitcGwyhyg+ozryvvaHwdJfo9a0riOKR5bkFawyLN1y7ueMJrltI9c59SdYm
	vnLJG+W67Y0JxS1cLfzn0sZD6BrfAp0LTHiOY=
MIME-Version: 1.0
Received: by 10.236.128.138 with SMTP id f10mr24167847yhi.2.1324678333485;
	Fri, 23 Dec 2011 14:12:13 -0800 (PST)
Received: by 10.236.174.66 with HTTP; Fri, 23 Dec 2011 14:12:13 -0800 (PST)
In-Reply-To: <20111223195713.GA61589@server.vk2pj.dyndns.org>
References: <4EF4A120.1000305@freebsd.org>
	<20111223195713.GA61589@server.vk2pj.dyndns.org>
Date: Fri, 23 Dec 2011 23:12:13 +0100
Message-ID: <CAPjTQNExAg5UrtvcH3rsX_S_Odjuhi=wRLL7BpgR_SwJR706HA@mail.gmail.com>
From: Oliver Pinter <oliver.pntr@gmail.com>
To: Peter Jeremy <peterjeremy@acm.org>
Content-Type: text/plain; charset=ISO-8859-1
Cc: freebsd-security@freebsd.org, security-officer@freebsd.org
Subject: Re: Merry Christmas from the FreeBSD Security Team
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 23 Dec 2011 22:41:19 -0000

On 12/23/11, Peter Jeremy <peterjeremy@acm.org> wrote:
> On 2011-Dec-23 07:41:20 -0800, FreeBSD Security Officer
> <cperciva@freebsd.org> wrote:
>>The timing, to put it bluntly, sucks.
>
> Since it's Saturday here, at the start of an extended holiday season, I
> would tend to agree.  That said, thanks for the explanation and I think
> you made the right call.
>
>>  On the positive side, most people
>>have moved past telnet and on to SSH by now;
>
> I thought everyone had but an acquaintance explained that he has to run
> telnet because his employer doesn't permit any encrypted outside access
> so the employer can monitor all traffic.

The solution for this situation is BalaBit SCB.

http://www.balabit.com/network-security/scb

>
> Merry Christmas to the security team.  Thanks for your efforts during
> 2011 and I hope you have a quiet and uneventful holiday period and 2012.
>
> --
> Peter Jeremy
>