3 ms·
Even if you don't run OpenBSD, you almost certainly use code written by the OpenBSD project—probably in a security-sensitive context. Given that I rely on the
by peatmoss 9y ago
Even if you don't run OpenBSD, you almost certainly use code written by the OpenBSD project—probably in a security-sensitive context.
Given that I rely on the OpenBSD project for things like secure access to remote systems (OpenSSH), I'd love to think that someone might loop them in on major vulnerabilities... just in the off chance that I might otherwise be adversely impacted.
- usernam33 9y agoYeah thx for that OpenBSD, but you patched early when the KRACK ATTACK hit. There is one important rule to follow when using nda: dont sneak! But ofc they should get a new chance.
- Paianni 9y agoThey were given the go-ahead to release the patch by the author of the vulnerability.
- jjeaff 9y agoBut isn't the agreement of not releasing early more to do with coordinating with other vulnerable systems? The person who found the vulnerability wouldn't care if one OS releases before another. But if I am Ubuntu, I'm pissed if openbsd released early and publicly reveals a zero day that I'm not ready to patch yet.
- Paianni 9y agoNone of that is OpenBSD's responsibility.