>Sometimes I
feel a bit sorry for them (and for him), but then the next minute I
don't feel sorry because there's damn good reasons they won't be
told about what I found.
This is hard to believe, is this the leader of the OpenBSD project saying he won't tell anyone at FreeBSD if he finds a hole that affects every FreeBSD installation? Or am I misunderstanding that message?
Pretty straightforward — Theo De Raadt is quite a well-known "controversial" character, and he's pretty blunt with it, too. Remember, he's the guy who was punted from NetBSD for "[a] long history of rudeness towards and abuse of users and developers," and the guy who Linus Torvards described as "difficult."
He's also an astoundingly capable, effective and security-focused developer. This means that there's probably a hole in the FreeBSD distribution of OpenSSH that he's aware of any has not disclosed. Dickish behaviour, but that's his MO, so there's little to be surprised about.
Dickish and credibility-burning I'd say. The reason that he's described as controversial and difficult is that some people still can and want to connect with him due to his technical expertise. If that repeatedly becomes subject to his whims, however, he might slip into what lies beyond "controversial and difficult".
"Basically, it is 10 years of FreeBSD stupidity. They don't know a thing about security. They even ignore relevant research in all fields, not just from us, but from everyone."
He might think they're stupid, that's not hard to believe. What's hard to believe is that he's altruistic enough to work on a huge open source project, but not enough to inform someone else of a hole that would affect a lot of people.
yeah, I'd be grumpy too if everyone uses your SSH implementation and can't even be arse'd to buy a friggin' CD or a t-shirt...then pooh-pooh the entire OpenBSD project, probably over that very SSH implementation.
don't let reality hurt your tender sensibilities ;)
12 comments
[ 3.1 ms ] story [ 29.9 ms ] threadThis is hard to believe, is this the leader of the OpenBSD project saying he won't tell anyone at FreeBSD if he finds a hole that affects every FreeBSD installation? Or am I misunderstanding that message?
He's also an astoundingly capable, effective and security-focused developer. This means that there's probably a hole in the FreeBSD distribution of OpenSSH that he's aware of any has not disclosed. Dickish behaviour, but that's his MO, so there's little to be surprised about.
"Basically, it is 10 years of FreeBSD stupidity. They don't know a thing about security. They even ignore relevant research in all fields, not just from us, but from everyone."
http://www.itwire.com/business-it-news/open-source/62641-cry...
don't let reality hurt your tender sensibilities ;)
http://article.gmane.org/gmane.os.openbsd.tech/35728
There is no security hole, he says.