Security

What I concerned has finally happend. nectar committed a patch to cvs without (in my view) maintainers’ permission.

Theo de Raddt has pointed out that the /dev/crypto testing program in FreeBSD, like in NetBSD, was derived from a test program which he never published with a free license. It has now been deleted from the NetBSD tree as well.

Big news! After about four months Jeffrey Hsu has finally merged his fix of RFC3042 to FreeBSD!

I have posted this into the “Security” category because this is a potentially a remote-exploitable security issue. (DoS maxmium).

Today someone posted a patch to qmail 1.0.3 and pointed out this.

I have a quick patch to this issue, hope it’s correct.

那个安全问题是……我曾经让这个blog以root的身份登入mysql

「什么，你居然允许服务以root登入数据库？」

也许有点偏执狂的倾向，不过，不让它以root登录，至少能让我睡个安稳觉了 :)