Date: Tue, 29 Apr 2025 09:35:06 +1000 From: Greg 'groggy' Lehey <grog@freebsd.org> To: Dag-Erling =?iso-8859-1?Q?Sm=F8rgrav?= <des@freebsd.org> Cc: "freebsd-questions@FreeBSD.org" <freebsd-questions@freebsd.org> Subject: Re: Is FreeBSD insecure? Message-ID: <aBAQql62xkYTpucv@hydra.lemis.com> In-Reply-To: <86msc0uwi3.fsf@ltc.des.dev> References: <MW4PR15MB5160CDBA9415E8712BD72842C9862@MW4PR15MB5160.namprd15.prod.outlook.com> <aA8n__R77NZsmR43@hydra.lemis.com> <86msc0uwi3.fsf@ltc.des.dev>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] On Monday, 28 April 2025 at 17:38:28 +0200, Dag-Erling Smørgrav wrote: > [op not cc:ed because they're obviously a troll] > > Greg 'groggy' Lehey <grog@freebsd.org> writes: >> Security is an important issue nowadays, and no operating system is >> perfect. The FreeBSD project does everything possible to maintain its >> good reputation, though so far I haven't seen anything that indicates >> that the breach was the result of a FreeBSD bug. Was it maybe a third >> party application, or incorrect configuration? > > It was allegedly an RCE in a long-unsupported version of > Ghostscript, so not FreeBSD's fault at all. Yes, I've since heard that too. See https://www.theregister.com/2025/04/15/4chan_breached/, though it only mentions out-of-date PHP and MySQL. That would have happened with any operating system. But it's good to bring these details out into the open. Greg -- When replying to this message, please copy the original recipients. If you don't, I may ignore the reply or reply to the original recipients. For more information, see http://www.lemis.com/questions.html Sent from my desktop computer. See complete headers for address and phone numbers. This message is digitally signed. If your Microsoft mail program reports problems, please read http://lemis.com/broken-MUA.php [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- iF0EARECAB0WIQSaG4ICvM64RvkvCawi5vKQUHpCIwUCaBAQqgAKCRAi5vKQUHpC I7n6AJ0Van9vx636WuxuW0O8a8A3sF6OCgCfWhwdHUp2NX8EHBSUb+5Mg24RHcE= =Mxrg -----END PGP SIGNATURE-----home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?aBAQql62xkYTpucv>