From owner-freebsd-security Mon Mar 26 13:40: 8 2001 Delivered-To: freebsd-security@freebsd.org Received: from obsecurity.dyndns.org (adsl-63-207-60-89.dsl.lsan03.pacbell.net [63.207.60.89]) by hub.freebsd.org (Postfix) with ESMTP id 0A60B37B71A for ; Mon, 26 Mar 2001 13:39:57 -0800 (PST) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id 335F866F4E; Mon, 26 Mar 2001 13:39:53 -0800 (PST) Date: Mon, 26 Mar 2001 13:39:53 -0800 From: Kris Kennaway To: Nate Williams Cc: "Michael A. Dickerson" , "Duwde (Fabio V. Dias)" , freebsd-security@FreeBSD.ORG Subject: Re: SSHD revelaing too much information. Message-ID: <20010326133953.E7234@xor.obsecurity.org> References: <99o4ge$1h7n$1@FreeBSD.csie.NCTU.edu.tw> <005f01c0b62e$9cab5980$db9497cf@singingtree.com> <15039.44653.624089.289615@nomad.yogotech.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="jTMWTj4UTAEmbWeb" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <15039.44653.624089.289615@nomad.yogotech.com>; from nate@yogotech.com on Mon, Mar 26, 2001 at 02:02:37PM -0700 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org --jTMWTj4UTAEmbWeb Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Mar 26, 2001 at 02:02:37PM -0700, Nate Williams wrote: > > Uh, Kris Kennaway was the first to respond to you on -stable, and the f= irst > > to disagree that this is a problem. He *is* the FreeBSD Security Offic= er. >=20 > That doesn't make him right. Very true, and in fact I don't see anyone claiming this, but I've already given my opinion on the non-seriousness of this complaint, so simply repeating existing arguments isn't going to change my mind: I don't think the person who forwarded this mail to security-officer realised they had already been talking to me. Kris --jTMWTj4UTAEmbWeb Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE6v7coWry0BWjoQKURAjyUAJ99dIF7WEMdVvvKk5sgU/TjvARhzwCgt/uW wpvDulPeiQSuD2YjfL4DujU= =YDTP -----END PGP SIGNATURE----- --jTMWTj4UTAEmbWeb-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message