How do you define remote holes? Which remotely accessible services were
compromised by this?
"Hey, somone hijacked facebook and I entered my password and submitted
it to them AND OPENBSD DID NOT SAVE ME!!!! OMG!!! OpenBSD is so
insecure!!!!".
There may or may not be a reason for applying sth similar to that patch
but OpenBSD cannot save you from everything, you know.
Why the hell do I even bother replying to this? Sorry, list.
/Alexander
irix wrote:
Hello Misc,
In www.openbsd.org wrote "Only two remote holes in the default
install, in more than 10 years!", this not true. I using OpenBSD
like customer, not like administrator. And my OpenBSD were attacked,
by simple MiTM attack in arp protocol. How then can we talk about the " security
by default" ????
For example, FreeBSD is decided very simply, with this patch
http://freecap.ru/if_ether.c.patch
When this is introduced in OpenBSD, so you can say with confidence
that the system really "Secure by default" ?