News for hackers. Stuff that matters.

A comment on Theo de Raadt on OpenSSL vulnerabilities coming on the 19th. Parent comment

Re:Theo de Raadt on OpenSSL vulnerabilities coming on the 19th by rlpb on Tuesday March 17, 2015 @08:04AM (#9217360)
It would be nice if he'd said that, rather than "Well, they just don't." which completely misrepresents the situation. AFAIK, he has never requested such a thing, anyway. The only requests I see come from third party apologists, not from him.

He just complains that they don't give him access, when in fact they offered him access.

> Theo meant he has no time to join yet another mailing list where OpenSSL security issues are very likely way less an 1% of the messages.

Is it really that hard to filter for /openssl/i/?

[ Parent | on HN ]
Re:Theo de Raadt on OpenSSL vulnerabilities coming on the 19th by worklogin on Tuesday March 17, 2015 @09:57AM (#9217904)
Is it really that hard to have a vulnerabilities mailer for important stuff?
[ Parent | on HN ]
Re:Theo de Raadt on OpenSSL vulnerabilities coming on the 19th by rlpb on Tuesday March 17, 2015 @10:23AM (#9218094)
You've just described the mailing list that de Raadt refuses to join.
[ Parent | on HN ]
Re:Theo de Raadt on OpenSSL vulnerabilities coming on the 19th by worklogin on Tuesday March 17, 2015 @01:54PM (#9219842)
From the context, it sounds like he was asked to join a linux distro security mailer, which wouldn't make sense. Isn't there an OpenSSL mailer for this stuff?
[ Parent | on HN ]
Re:Theo de Raadt on OpenSSL vulnerabilities coming on the 19th by gpvos on Tuesday March 17, 2015 @05:25PM (#9221613)
There are two lists: linux-distros and distros, the latter including FreeBSD and NetBSD. (Why is OpenSolaris - or whatever it's called this year - not in there too?)

Nevertheless, it should be doable for OpenSSL to also mail LibreSSL; it is a bit of a special case, after all.

[ Parent | on HN ]
Re:Theo de Raadt on OpenSSL vulnerabilities coming on the 19th by tedunangst on Tuesday March 17, 2015 @06:28PM (#9222066)
We asked for advance notice in the past. We received advance notice in the past. This time we didn't. Now we did, again.
[ Parent | on HN ]