15 years later: remote code execution in qmail

Re:15 years later: remote code execution in qmail by vinay_ys on Wednesday May 20, 2020 @04:41PM (#23251522)

http://cr.yp.to/talks/2007.11.02/slides.pdf I don't see ego in these slides. I see a brilliant programmer acknowledging his mistakes and learning from them. I really enjoyed running qmail in early 2000s and following djb's crypto work later. He is brilliant indeed.

[ Parent | on HN ]

Re:15 years later: remote code execution in qmail by cadence- on Wednesday May 20, 2020 @06:45PM (#23252877)

You should read some of his public.... ekhm... “discussions” with Wietse Venema on various security forums in the 90’s. It was very entertaining, but also clearly showcasing djb’s huge ego.

[ Parent | on HN ]

Re:15 years later: remote code execution in qmail by reaperducer on Wednesday May 20, 2020 @07:37PM (#23253306)

A lot of it would get you banned from HN and similar fora today.

[ Parent | on HN ]

Re:15 years later: remote code execution in qmail by cadence- on Wednesday May 20, 2020 @06:51PM (#23252938)

Here is my favourite that I remember to this day: https://seclists.org/bugtraq/1998/Nov/117

[ Parent | on HN ]

Re:15 years later: remote code execution in qmail by Snelius on Wednesday May 20, 2020 @10:43PM (#23254339)

Hah, "How many people relaxed after installing tcpd -DPARANOID, instead of pestering their vendors for a real fix?" Sounds similar here ;)

[ Parent | on HN ]

Re:15 years later: remote code execution in qmail by Quekid5 on Thursday May 21, 2020 @07:50AM (#23257282)

Yeah, the lack of self-reflection is pretty palpable.

[ Parent | on HN ]