Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 7 Mar 2005 09:50:32 -0600
From:      "Jacques A. Vidrine" <nectar@FreeBSD.org>
To:        Xin LI <delphij@frontfree.net>
Cc:        delphij@freebsd.org
Subject:   Re: possible wrong date in 4a0b334d-8d8d-11d9-afa0-003048705d5a
Message-ID:  <20050307155031.GE3503@lum.celabo.org>
In-Reply-To: <1110209378.669.42.camel@spirit>
References:  <310205489.09789@bjut.edu.cn> <1110209378.669.42.camel@spirit>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Mar 07, 2005 at 11:29:38PM +0800, Xin LI wrote:
> $B:_(B 2005-03-07$B0lE*(B 22:41 +0800$B!$(BKang Liu$B<LF;!'(B
> > Hi,
> > 	The discovery date of 4a0b334d-8d8d-11d9-afa0-003048705d5a might be
> > wrong. I've told delphij (the submitter of that entry), while he said that
> > date came from the original source. But, as we all know, 2005 is not leap
> > year, actually there is no Feb 29th 2005...I think it could be better if we
> > change it to Feb 28th 2005.
> 
> Thanks for noticing this.  I'm aware of the issue, but it is the
> official version claims Feb 29th:
> 
> 	http://216.127.76.78/~neosecur/index.php?pagina=advisories&id=8
> 
> And my letter has been bounced before I have decided to commit it as-is.
> 
> I'm inclined in keeping it there until some of us can *actually* contact
> the author to confirm the discovery date.  Replacing an official (while
> it appears to be wrong) date with a guessed value (we will never know if
> it is or is not wrong, and I personally infer it should be March 1st) is
> more or less pointless.

No, it must be changed and I have already done so.  It is unacceptable
to have an invalid date: VuXML applications are encouraged to get mad
when encountering such bogus data (^_^).  I've changed it to
2005-02-28 in the interim.

The date cannot be `official'... it is not a date any more than
2005-99-99 is a date.

The "discovery" date is actually the date of first public disclosure,
by the way.  Thus, it seems that 2005-03-02 is probably most accurate.
However, it isn't really important.  It is just to give people an idea
of how long they may have been exposed.

Cheers,
-- 
Jacques A Vidrine / NTT/Verio
nectar@celabo.org / jvidrine@verio.net / nectar@FreeBSD.org



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050307155031.GE3503>