Date: Wed, 9 Jul 2008 12:09:57 -0400 From: "Josh Mason" <wtf.matters@gmail.com> To: remko@elvandar.org Cc: freebsd-security@freebsd.org, astorms@ncircle.com Subject: Re: BIND update? Message-ID: <17cd1fbe0807090909i566e1789s6b7b61bf82dd333e@mail.gmail.com> In-Reply-To: <3a558cb8f79e923db0c6945830834ba2.squirrel@galain.elvandar.org> References: <17cd1fbe0807090819o2aa28250h13c58dbe262abb7c@mail.gmail.com> <3a558cb8f79e923db0c6945830834ba2.squirrel@galain.elvandar.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On 7/9/08, Remko Lodder <remko@elvandar.org> wrote:
>
>
> something like this. There is a mitigation strategy for the BIND issue as
> already reported on the list. Given your response you must be clever
> enough to find it.
Yes, because turning off my name servers is really a solution. This
service is already filtered but nothing prevents the thousands of
"authorized" hosts from exploiting this vulnerabilty. I'm sure this is
true for many other users providing similar services.
> >
> > Thanks for all the hard work,
>
> Thanks for the deeper attitude and the email. I hope you can understand
> that we are a volunteer organisation which does not have paid people
> working on items 24/7 which other vendors might have. If you want to have
> that, I am sure we can get some people so far for getting payed for their
> normal wages so that we can do that as well. Till that time you should
> understand volunteer organisations better, or come up with a better
> proposal you simply don't know how much is involved here.
So when all else fails claim that we should expect nothing more from
volunteers. Message received and understood.
We all know how the rest of the opensource operating system community
has legions of paid developers. Poor FreeBSD.
> >
> > Your incredibly loyal follower
> >
>
> Sarcastic.
Only in recent months could that be taken sarcastically. You can thank
the new direction of the project for that.
Josh
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?17cd1fbe0807090909i566e1789s6b7b61bf82dd333e>