4 ms·
>Sometimes I feel a bit sorry for them (and for him), but then the next minute I don't feel sorry because there's damn good reasons they won't be told about wha
by Demiurge 13y ago
>Sometimes I
feel a bit sorry for them (and for him), but then the next minute I
don't feel sorry because there's damn good reasons they won't be
told about what I found.
This is hard to believe, is this the leader of the OpenBSD project saying he won't tell anyone at FreeBSD if he finds a hole that affects every FreeBSD installation? Or am I misunderstanding that message?
- jnbiche 13y agoYeah, what is the world is this about? Can anyone clue us in?
- matthewmacleod 13y agoPretty straightforward — Theo De Raadt is quite a well-known "controversial" character, and he's pretty blunt with it, too. Remember, he's the guy who was punted from NetBSD for "[a] long history of rudeness towards and abuse of users and developers," and the guy who Linus Torvards described as "difficult." He's also an astoundingly capable, effective and security-focused developer. This means that there's probably a hole in the FreeBSD distribution of OpenSSH that he's aware of any has not disclosed. Dickish behaviour, but that's his MO, so there's little to be surprised about.
- sentenza 13y agoDickish and credibility-burning I'd say. The reason that he's described as controversial and difficult is that some people still can and want to connect with him due to his technical expertise. If that repeatedly becomes subject to his whims, however, he might slip into what lies beyond "controversial and difficult".
- aspidistra 13y agoHere's some previous, from de Raadt, Dec 2013: "Basically, it is 10 years of FreeBSD stupidity. They don't know a thing about security. They even ignore relevant research in all fields, not just from us, but from everyone." http://www.itwire.com/business-it-news/open-source/62641-crypto-freebsd-playing-catch-up-says-de-raadt http://www.itwire.com/business-it-news/open-source/62641-cry...
- Demiurge 13y agoHe might think they're stupid, that's not hard to believe. What's hard to believe is that he's altruistic enough to work on a huge open source project, but not enough to inform someone else of a hole that would affect a lot of people.