Subject: Re: cvs commit: src/lib/libc/db/hash hash_buf.c
To: Theo de Raadt <deraadt@theos.com>
From: John S. Dyson <toor@dyson.iquest.net>
List: tech-userlevel
Date: 10/19/1996 01:50:02
>
> > > Ah, yes. I've been watching this thread with some amount of amusement, as
> > > have other OpenBSD developers.
> > >
> > > Yes, please back it out. I would rather have OpenBSD remain the most secure
> > > version of UNIX that money can't buy.
> > >
> >
> > The THING about OpenBSD security is pretty much unsubstantiated. I think
> > that it is kind of funny (odd)... Very few outside of OpenBSD have been
> > provided with any kind of digest as to the security fixes... Sounds like
> > marketing claims to me!!!
> >
> > Additionally, that "fix" was simply the wrong thing to do, and there are
> > better ways to deal with the problem. If the zeroing the buffer in db
> > was typical of the ways that others are "fixing" security, well... Sad... :-(.
>
> Ah John, ever eager to continue a flame war aren't you.
>
Please refer to the message that I commented on... I am NOT flaming,
simply stating an outsiders view of the unsubstantiated OpenBSD position.
BTW, what flame war? Why are you bringing flamage up?
John
dyson@freebsd.org -- BSD with a heart, we offer to help.