Slashdot Mirror


User: Jeremy+Wohl

Jeremy+Wohl's activity in the archive.

Stories
0
Comments
2
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 2

  1. Discredited coding idioms on New ssh Exploit in the Wild · · Score: 1
    You have to wonder how OpenBSD audits allowed thoroughly discredited coding idioms to remain in critical security software. Manual buffer and string management is the principal cause of overflow grief. Yet here we have at least five examples (as of the 3.7.1 patch) of both manual and repeated abuse. The latter is more troubling: apparently there was not even incentive to abstract these routines and fix them centrally, but to sprinkle such pre-1980 thinking throughout.

    If only Dan would write a secure shell package.

  2. Re:Check out glastree on Linux Backups Made Easy · · Score: 2, Informative
    Hi, I'm the glastree author.

    Yes, my software does essentially this, wrapped up in a nice utility (though, you get day resolution).

    What we want, of course, is a better replica of plan9's dumpfs, featuring a real filesystem layer and compressed block differences. This is on my TODO list.

    -jeremy