OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Alex de Joode (usurazedz.net)
Date: Wed Jun 26 2002 - 14:09:49 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed, Jun 26, 2002 at 11:38:14AM -0600, Theo de Raadt wrote:
    > > From the amount of e-mail I've seen from the core developers on this issue
    > > it's apparent to me the level of severity and importance that you placed
    > > on mitigating the known bug, fixing it and warning the general public
    > > about it.
    >
    > Hmm.
    >
    > > I can't even imagine the amount of lost sleep on y'alls part in resolving
    > > this issue. I'm quite sure the response would not have continued
    > > around the clock from some of the large commercial OS's.
    >
    > What is this sleep you talk of?
    >
    > I've slept about 16 hours in the last week. Now I can't go to sleep.
    > Kjell was kind enough to bring over some beer earlier, so now I think
    > is a good time to get smashed.

    Don't code and drink, okay ?

    Someone forwarded me this: (he tought is was funny)

    A security problem in SSH that OpenSSH didn't have. In de Raadt's typical
    straightforward fashion, he says: "A lot of their customers were using
    SSH.com software on Solaris boxes. On Solaris boxes, this was a sure
    remote hole. A disastrous one. Many customers just gave up at that
    point; my view is that this was a completely careless mistake that SSH.com
    which should not have slipped through internal beta testing."

    http://newsforge.com/article.pl?sid=02/02/25/1455230&mode=thread

    -- 
    Alex de Joode
    usurazedz.net