On Thursday 09 January 2003 10:49 am, Mihai Chelaru wrote:
> Anyone read this ?
> http://www.eweek.com/article2/0,3959,809353,00.asp?kc=EWTH102099TX1K0100487

Ofir Arkin posted an update to Bugtraq this afternoon 
(http://online.securityfocus.com/archive/1/306110/2003-01-07/2003-01-13/0), 
essentially telling people not to dismiss this "Etherleak" problem out of 
hand (.  He asserts that NetBSD was tested and found to exhibit the problem, 
although that's the only NetBSD reference in his note or the original paper 
(http://www.sys-security.com/archive/papers/atstake_etherleak_report.pdf).  

That said, I agree with the other posters - it seems like a tempest in a 
teapot to me.
-- 
Ross A. Patterson
Chief Technology Officer
CatchFIRE Systems, Inc.
5885 Trinity Parkway, Suite 220
Centreville, VA  20120
(703) 563-4164