Only two remote holes in the default install, in more than 10 years (301.sickos.org)

17 points by gopher 17y ago ↗ HN

12 comments

[ 4.3 ms ] story [ 41.5 ms ] thread

Is that a hole? Is that a default install?

A security hole? Indeed. In the default install? No, but anyways, those are the security guys and I feel this was funny:-)

gstar 17y ago ↗

I cant decide if that's classy or cheeky.

But regardless, I dont know if a bug in cvsweb counts as openbsd - does it?

Not when cvsweb is running on Solaris.

why run solaris at all when there is only 2 remote holes in the default install of openbsd?

Probably because when somebody donates tons of space and bandwidth to you, it's rude to argue with them over their choice of OS.

[dead] jazj 17y ago ↗

In before OpenBSD fanboys fall over themselves to point out AH BUT THAT'S NOT THE OPENBSD DEFAULT INSTALL.

Oops, too late.

there 17y ago ↗

oh no, a lame xss bug in a 3rd party cgi script that runs on a solaris web server hosting a website that uses no cookies. surely this is big news!

You have achieved the difficult task of making CVS less usable.

tptacek 17y ago ↗

OH NOEZ! U G0TZ MY CVSWEB COOKEEZ!

dguido 17y ago ↗

This was posted on full-disclosure August 6th.