3 ms·
We're not mind readers. If he says it's ok, we think it's ok. If other vendors have fucked up months long patch cycles, that's their deal, not ours.
by tedunangst 9y ago
We're not mind readers. If he says it's ok, we think it's ok. If other vendors have fucked up months long patch cycles, that's their deal, not ours.
- titzer 9y agoNow that it's more clear what role disclosure deadlines play in cooperating with security researchers, it probably makes more sense to just cooperate than point fingers.
- lifthrasiir 9y agoHe said it's ok this time, but won't be so in the future (pretty clear from the future action). So your decision is still subject to the criticism.
- ComputerGuru 9y agoWhat part of this commit description is "not revealing details"? https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/027_net80211_replay.patch.sig https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/027_n...
- tedunangst 9y agoAll of it? The paper describing the attack is longer than one sentence.
- askz 9y agoand this one ? ctrl+f replay https://www.tedunangst.com/flak/post/openbsd-changes-of-note-627 https://www.tedunangst.com/flak/post/openbsd-changes-of-note...