Full Disclosure mailing list archives

Re: U.S. military helps fund Calgary hacker with $2.3 million


From: "Wayne Chang" <WChang () pickatime com>
Date: Mon, 7 Apr 2003 16:21:13 -0400

"Only one remote hole in the default install, in more than 7 years!"

I take it that it means there has been only one remote hole in the default
install a one 7-year stretch, whether that includes this year or not, it
doesn't say.

1990-1997 is a 7-year stretch.
1991-1998 is a 7-year stretch.

By default install, it means the default install of any openbsd in that
7-year stretch, not specific on one.

It's pretty tricky that the marketting strategists over there wrote up that
sentence, but if it sells one more license, then so be it.

Wayne Chang
Pacific Northwest Software
----- Original Message -----
From: "Pekka Savola" <pekkas () netcore fi>
To: "Blue Boar" <BlueBoar () thievco com>
Cc: <guninski () guninski com>; <full-disclosure () lists netsys com>
Sent: Monday, April 07, 2003 3:37 PM
Subject: Re: [Full-disclosure] U.S. military helps fund Calgary hacker with
$2.3 million


On Mon, 7 Apr 2003, Blue Boar wrote:
I'd be willing to give Theo the benefit of the doubt
that the author misunderstood the "Only one remote hole in the default
install, in more than 7 years!" claim of the OpenBSD team.  Unless you
think that claim is also untrue.

That claim is certainly untrue.

If you take a default install from 7 years back, you certainly have more
remote holes, in services that have since been removed from the default
install -- looking 7 years back from *current* default install, not
default install *7 years back*.

--
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: