I suspect I'm not going to appease the C or scripting purists out there. The ridiculous "you should rewrite in in perl" folks and the C people that think calling ftp() from C, which cuts down on code complexity, etc. will be looked down upon. It will probably be like how corporate Linux users like Google's Android view openbsd pioneered security mitigations favorably 5 years later. I did replace the uname(1) with uname(3) which makes it a little less sloppy, minimizing the fixed size arrays. I think that making 'line' functionality into a list or varying size dynamic array would be even more sloppy. The only problem is that the program is potentially subject to a man-in-the-middle attack from a non secured webpage. Manually setting the package mirror has the same problem too though. On Jan 30, 2016 06:50, <li...@wrant.com> wrote:
> Fri, 29 Jan 2016 16:35:12 -0600 Luke Small <lukensm...@gmail.com> > > I have secure architectures with openbsd. > > Looks like public learning from a viewer's point, thanks for sharing > your work so far. This is the right thing to show progress and ask > reviews. Please try to very carefully listen what devs tell you, > commentaries from others are only secondary. > > Though you may not have thought of it this way, your contributions are > appreciated no matter what people say on the mailing list. > > > It is a tiny program that does everything that I want to do. I even > tested > > it in virtualbox with a 32 MB ram virtual machine and it worked. You > could > > probably run it on a VAX. Say that about any other solution like mine. It > > is minimal complexity other than the used call maybe. All that you can > say > > bad about it is that you don't want what it does. If there were a smaller > > file than SHA256 that doesn't change names every release, then I would > > choose that file. > > We both remember you had a long discussion on the applicability of the > suggested program in public. Please follow up on that part with > developers and they'll guide you patiently and with much attention to > detail where and how to apply your skill best. > > > Is there a way to time the execution time of ftp while setting a timeout > > period for that call without kqueue? By the way I never read about kqueue > > in any openbsd books at least how it is implemented. I used various man > > pages and examples. > > You are on the right track, keep up the work.
