[TriLUG] OpenSSH vulnerability fear mongering

Tanner Lovelace lovelace at wayfarer.org
Tue Jun 25 13:21:41 EDT 2002


On Mon, 2002-06-24 at 19:39, H. Wade Minter wrote:

> Be ready for this SSH stuff coming down the pike...

While this may actually be a problem, and I do agree that
using privilege separation is generally a good idea.  Theo
da Raadt's (the leader of OpenBSD) announcement just rubs
me the wrong way.  It appears his announcement is aimed
at whipping everyone into a frenzy to make the upgrade to
the latest version.  In addition, he seems to be deliberately
insulting various vendors in an effort to make them go
the way *he* wants them to go.

Whether or not this supposed "vulnerability" turns out
to be a big deal or not, I believe this is a perfect example of
how not to conduct yourself.

Opinions?

Tanner
--
P.S. For those of you who don't realize, the above message is
not meant to be the official position TriLUG Steering Committee.  
While I am a member of the SC, the above is strictly my personal 
opinion and is not in any way indicitive of how the SC or TriLUG
may or may not feel about this issue.

#include <std_disclaimer>
-- 
Tanner Lovelace | lovelace at wayfarer.org | http://wtl.wayfarer.org/
--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--
GPG Fingerprint = A66C 8660 924F 5F8C 71DA  BDD0 CE09 4F8E DE76 39D4
GPG Key can be found at http://wtl.wayfarer.org/lovelace.gpg.asc
--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--
"Computer games don't affect kids; I mean if Pac-Man affected us as
kids, we'd all be running around in darkened rooms, munching magic
pills and listening to repetitive electronic music."
                                Kristian Wilson, Nintendo, Inc, 1989




More information about the TriLUG mailing list