4 ms·
It is time for a public OpenSSH audit. Word on the street is the code is horrific and last I checked was not even checked into git, in any way, yet.
by rsync 13y ago
It is time for a public OpenSSH audit.
Word on the street is the code is horrific and last I checked was not even checked into git, in any way, yet.
- LukeShu 13y agoIt's not checked into git... because they use CVS.
- anotherhue 13y agoThe OpenBSD guys are usually pretty good at security, but does CVS have the integrity verification of more modern RCS? Since OpenSSH is probably responsible for more data than GPG, (the importance of that data aside) I think you're spot on.