3 ms·
Sounds like a "we technically respected the embargo, just not in principle" sort of thing to me.
by mtgx 9y ago
Sounds like a "we technically respected the embargo, just not in principle" sort of thing to me.
- dom0 9y agoThey agreed, but now they regret the decision and wouldn't make it again. To prevent themselves from doing so, they will not speak with OpenBSD until later in the process.
- gcp 9y agoWhat's the word for pressuring a person until they make a decision they immediately regret?
- deleted 9y ago[deleted]
- tedunangst 9y agoWe're not mind readers. If he says it's ok, we think it's ok. If other vendors have fucked up months long patch cycles, that's their deal, not ours.
- titzer 9y agoNow that it's more clear what role disclosure deadlines play in cooperating with security researchers, it probably makes more sense to just cooperate than point fingers.
- lifthrasiir 9y agoHe said it's ok this time, but won't be so in the future (pretty clear from the future action). So your decision is still subject to the criticism.
- ComputerGuru 9y agoWhat part of this commit description is "not revealing details"? https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/027_net80211_replay.patch.sig https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/027_n...
- tedunangst 9y agoAll of it? The paper describing the attack is longer than one sentence.
- askz 9y agoand this one ? ctrl+f replay https://www.tedunangst.com/flak/post/openbsd-changes-of-note-627 https://www.tedunangst.com/flak/post/openbsd-changes-of-note...