packages, libfetch, and SSL

2007-10-21 Thread David E. Thiel
Hello, I've been doing some thinking about the security of the packages and ports system, and have noticed that there is something of a weak link when it comes to fetch/libfetch in general, and the way we do pkg_adds in particular. While updates to the ports tree happen in a pretty secure manner o

Re: packages, libfetch, and SSL

2007-10-22 Thread David E. Thiel
On Mon, Oct 22, 2007 at 10:07:33AM +0800, Adrian Chadd wrote: > You can't (easily) cache data over SSL. Well, you can't use a HTTP > proxy that doesn't break the SSL conversation and cache the updates. > > As someone who occasionally makes sure that distribution updates > through a Squid proxy act

Re: macbook atheros driver in 7-beta2

2007-11-13 Thread David E. Thiel
On Tue, Nov 13, 2007 at 08:51:05AM -0800, brad clawsie wrote: > i am looking for advice on the best alternative for wireless support, > the provided ath driver does not provide support. > > sam leffler has a patch here > > http://people.freebsd.org/~sam/ath_hal-20070428.tgz > > but i am not sure

Re: Security Flaw in Popular Disk Encryption Technologies

2008-02-23 Thread David E. Thiel
On Sat, Feb 23, 2008 at 02:08:31PM +1300, Atom Smasher wrote: > article below. does anyone know how this affects eli/geli? There's fairly little any disk crypto system can do to thoroughly defend against this. The best workaround currently is to turn off your machine when not in use. This has alwa

Re: Lack of Flash support is no longer acceptable. Bounty established...

2008-06-19 Thread David E. Thiel
On Thu, Jun 19, 2008 at 02:37:48PM -0700, John Kozubik wrote: > FreeBSD is not useful as a desktop environment without the ability to > support Flash in a stable, well-performing fashion. Nonsense. This presumes anything "useful" has ever been written in flash. > Free flash alternatives and flash

Re: Lack of Flash support is no longer acceptable. Bounty established...

2008-06-24 Thread David E. Thiel
On Tue, Jun 24, 2008 at 01:40:44PM -0600, Mark Carlson wrote: > 0. Install wine ( emulators/wine ) > 1. Download firefox for windows ( > http://www.mozilla.com/en-US/firefox/all.html ) > 2. Run: wine "Firefox Setup 3.0.exe" > 3. Complete the installer > 4. To run firefox you need to do something li

Re: Lack of Flash support is no longer acceptable. Bounty established...

2008-06-25 Thread David E. Thiel
On Wed, Jun 25, 2008 at 09:21:53PM +0100, RW wrote: > > Btw there is a small nasty problem copy/paste from wine app to native > > apps does not work. Ideas how to workaround this? > > It's only the traditional X, select and middle-click, that > doesn't work in my experience > > The windows-styl