News for hackers. Stuff that matters.

A comment on 15 years later: remote code execution in qmail. Parent comment

Re:15 years later: remote code execution in qmail by dullgiulio on Thursday May 21, 2020 @06:33AM (#23256809)
salsa20 was added in 2012, the warning file was added into the repository in 2016 the earliest (it is not clear when--which is vary bad for security and also shows the move was not advertised.)

Incompetence is a strong word on the wrong target...

[ Parent | on HN ]
Re:15 years later: remote code execution in qmail by dependenttypes on Thursday May 21, 2020 @07:11AM (#23257005)
> the warning file was added into the repository in 2016 the earliest

There is no official public repository. It gets released in tarballs.

This does indeed make him seem slightly less incompetent though.

> which is vary bad for security

It is a framework for benchmarking cryptographic algorithms.

[ Parent | on HN ]