Re: OpenSSH HPN

2015-11-11 Thread Ben Woods
On Wednesday, 11 November 2015, John-Mark Gurney wrote: > Ben Woods wrote this message on Wed, Nov 11, 2015 at 15:40 +0800: > > I have to agree that there are cases when the NONE cipher makes sense, > and > > it is up to the end user to make sure they know what they are doing.

Re: OpenSSH HPN

2015-11-11 Thread Ben Woods
On Wednesday, 11 November 2015, Bryan Drewery wrote: > On 11/10/15 9:52 AM, John-Mark Gurney wrote: > > My vote is to remove the HPN patches. First, the NONE cipher made more > > sense back when we didn't have AES-NI widely available, and you were > > seriously limited by it's performance. Now

Re: using pkg audit to show base vulnerabilities

2016-09-07 Thread Ben Woods
On 8 September 2016 at 05:25, Mark Felder wrote: > I have been toying with the idea of creating a port that provides a > script called "baseaudit" that can make it very easy to check your > system for known vulns. With the majority of the logic in this script we > could also include this periodic

Re: [FreeBSD-Announce] FreeBSD 9.3, 10.1 and 10.2 EoL

2016-12-31 Thread Ben Woods
Sent from my iPhone > On 1 Jan 2017, at 8:35 am, Xin LI wrote: > The currently supported branches and releases and their expected > end-of-life dates are: > > +--+ > | Branch | Release | Type | Release Date |

Re: Intel / AMD CPU Microcode Updates Required For Security

2017-05-28 Thread Ben Woods
On Mon, 29 May 2017 at 7:35 am, RW via freebsd-questions < freebsd-questi...@freebsd.org> wrote: > On Sun, 28 May 2017 17:53:01 -0400 > grarpamp wrote: > > > Blobs that fix exploitable things may be slightly better than blobs. > > Awareness should be raised, and updates applied to systems. > > > >

Re: New Security Officer

2017-11-06 Thread Ben Woods
On Mon, 6 Nov 2017 at 3:51 pm, Xin Li wrote: > (bcc'ed to core@, developers@) > > Hello all, > > I'm very please to announce that Gordon Tetlow (gordon@) has offered to > take over as FreeBSD Security Officer, which the FreeBSD Core Team has > approved. Over the last few months, we have worked t

Re: Early heads-up: plan to remove local patches for TCP Wrappers support in sshd

2020-02-14 Thread Ben Woods
On Sat, 15 Feb 2020 at 4:27 am, Joey Kelly wrote: > On Friday, February 14, 2020 01:18:44 PM Ed Maste wrote: > > Upstream OpenSSH-portable removed libwrap support in version 6.7, > > released in October 2014. We've maintained a patch in our tree to > > restore it, but it causes friction on each O

Re: FreeBSD Security Advisory FreeBSD-SA-23:01.geli

2023-02-09 Thread Ben Woods
ad. I never got around to adding unit tests for init/attach multiple providers as was requested by Alan Somers at the time (sorry), but I suspect even if I had they would have passed because I wouldn’t have thought to test for this scenario. Regards, Ben -- From: Ben Woods woods...@freebsd.org