Re: Oops,I guess Sendmail wasn't secure after all...

2001-06-03 Thread Felix von Leitner
Thus spake Boris ([EMAIL PROTECTED]): > JA> Not quite. More like "someone inspects your free car and finds a button > JA> that can make it explode. Maybe he pushes the button, maybe not. Maybe he > JA> pushes the button on someone else's car". Are you willing to take that > JA> risk? I can imagine

Re: Re[2]: Oops,I guess Sendmail wasn't secure after all...

2001-06-02 Thread Russell Nelson
Boris writes: > If you will find 100 bugs in sendmail they are fixed then after > reporting them. The games is over, the problem is solved. The admin > updates, and thats all. Actually, the admin doesn't update. Or rather, some do, and some don't. -- -russ nelson <[EMAIL PROTECTED]> http:/

Re: Oops,I guess Sendmail wasn't secure after all...

2001-06-02 Thread Todd Finney
At 12:25 PM 6/2/01, Mark Delany wrote: >On Sat, Jun 02, 2001 at 05:20:01PM +0200, Boris allegedly wrote: > > Well, there is no button with a text like "press me here" -) > for > > the public. > >Of course there is, silly. > >Now, what do you think most script kiddies do? They don't scour the

Re: Oops,I guess Sendmail wasn't secure after all...

2001-06-02 Thread Mark Delany
On Sat, Jun 02, 2001 at 05:20:01PM +0200, Boris allegedly wrote: > Hello Johan, > > > JA> Not quite. More like "someone inspects your free car and finds a button > JA> that can make it explode. Maybe he pushes the button, maybe not. Maybe he > JA> pushes the button on someone else's car". Are yo

Re: Oops,I guess Sendmail wasn't secure after all...

2001-06-02 Thread Patrick Atamaniuk
Aaron L. Meehan([EMAIL PROTECTED])@2001.06.01 12:14:20 +: > I've been looking for a sucker.. OK I'll bet a six pack is > doesn't. (or, if Bud, I'd demand a case) i put another six pack on top. Reasons per priv. mail -- regards, Patrick ---

Re[2]: Oops,I guess Sendmail wasn't secure after all...

2001-06-02 Thread Adrian Ho
On Sat, 2 Jun 2001, Boris wrote: > There should be one file to download and the makefile should do nearly > everything neccessary. I should not spend days to understand the > different modules as a newbie, it takes too much time. I would argue that you /should/ take the time. Qmail's power lies

Re[4]: Oops,I guess Sendmail wasn't secure after all...

2001-06-02 Thread Boris
Hello Johan, JA> Not quite. More like "someone inspects your free car and finds a button JA> that can make it explode. Maybe he pushes the button, maybe not. Maybe he JA> pushes the button on someone else's car". Are you willing to take that JA> risk? I can imagine two situations where that woul

Re: Re[2]: Oops,I guess Sendmail wasn't secure after all...

2001-06-02 Thread Johan Almqvist
* Boris <[EMAIL PROTECTED]> [010602 16:28]: > LM> If you bought (OK, got for free) a car, and it exploded, leaving you > LM> burned, then you waited a week to get a new car mailed to you, then you > The car is not exploding, someone comes and looks at your car. He is > searching and searching and

Re[2]: Oops,I guess Sendmail wasn't secure after all...

2001-06-02 Thread Boris
Hello List, Saturday, June 02, 2001, 7:24:56 AM, you wrote: LM> If you bought (OK, got for free) a car, and it exploded, leaving you LM> burned, then you waited a week to get a new car mailed to you, then you The car is not exploding, someone comes and looks at your car. He is searching and se

Re: Re[2]: Oops,I guess Sendmail wasn't secure after all...

2001-06-02 Thread Daniel Kelley
> Why no one makes a package with "all you need" to download and > install, here is a suggestion: > > - qmail > - the tcpserver > - something good for pop before smtp > - vpopmail > - good tools for blocking spam, blocking mails from open relays, and > so on > - and other additions from other pe

Re[2]: Oops,I guess Sendmail wasn't secure after all...

2001-06-02 Thread Boris
Hello List, Saturday, June 02, 2001, 7:24:56 AM, you wrote: >> I like sendmail, its slow - yes, but it is powerful and this silly >> bugs are fixed fast. Its just some C-Code, everyone knows this. LM> Yeah, it is only a few hundred thousand lines of code, and you should have LM> looked through

Re: Oops,I guess Sendmail wasn't secure after all...

2001-06-02 Thread Karsten W. Rohrbach
Boris([EMAIL PROTECTED])@2001.06.02 05:01:57 +: > When I was using sendmail on my FreeBSD Server, it has never been > hacked, very strange ugh? no. with your domain name, it is very unlikely to be a crack target ;-) if your domain is called cnn.com or the like, you would not run sendmail for t

Re[2]: Oops,I guess Sendmail wasn't secure after all...

2001-06-02 Thread Boris
Hello Russell, Saturday, June 02, 2001, 5:38:43 AM, you wrote: RN> Boris writes: RN> > I really can´t hear the "qmail is the most secure bla bla" anymore, RN> > really. RN> Why? It's true. Yes it is true, and qmail is great, but it would be better to make a better documentation for qmail, a

Re: Oops,I guess Sendmail wasn't secure after all...

2001-06-01 Thread List Monkey
> I like sendmail, its slow - yes, but it is powerful and this silly > bugs are fixed fast. Its just some C-Code, everyone knows this. Yeah, it is only a few hundred thousand lines of code, and you should have looked through it for bugs or exploits before you compiled it, right? It is just some

Re: Oops,I guess Sendmail wasn't secure after all...

2001-06-01 Thread Russell Nelson
Boris writes: > I really can´t hear the "qmail is the most secure bla bla" anymore, > really. Why? It's true. > At the moment I am evaluating qmail, and there > are some things I am missing from sendmail. Like what? -- -russ nelson <[EMAIL PROTECTED]> http://russnelson.com Crynwr sells

Re: Oops,I guess Sendmail wasn't secure after all...

2001-06-01 Thread Mark Delany
On Sat, Jun 02, 2001 at 05:01:57AM +0200, Boris allegedly wrote: > bugs are fixed fast. Its just some C-Code, everyone knows this. This is a troll, right? I have a lock on my front door that I know can be opened with a paperclip, but heck, those nice people who make the locks will supply me wit

Re: Oops,I guess Sendmail wasn't secure after all...

2001-06-01 Thread Boris
Hello Dave, DS> Anyone want to takes bets on whether qmail has unsafe signal handlers? DS> -Dave I really can´t hear the "qmail is the most secure bla bla" anymore, really. I like sendmail, its slow - yes, but it is powerful and this silly bugs are fixed fast. Its just some C-Code, everyone kn

Re: Oops,I guess Sendmail wasn't secure after all...

2001-06-01 Thread Aaron L. Meehan
Quoting Dave Sill ([EMAIL PROTECTED]): > Anyone want to takes bets on whether qmail has unsafe signal handlers? I've been looking for a sucker.. OK I'll bet a six pack is doesn't. (or, if Bud, I'd demand a case) Aaron

Oops,I guess Sendmail wasn't secure after all...

2001-06-01 Thread Dave Sill
From: Gregory Neil Shapiro <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: sendmail 8.11.4 and 8.12.0.Beta10 available Sendmail, Inc., and the Sendmail Consortium announce the availability of sendmail 8.11.4 and 8.12.0.Beta10. 8.11.4 revamps signal handling within the MTA in o