Skip to content

Comment on OpenSSL release announced for Mar 19. Fixes “high” severity security defects.parent

Comments

I do not remember Theo ever telling me in the 1990s that he believed NetBSD team members were using their access to develop attacks. His opinion of the NetBSD team was far too low to give them that much credit. Theo was much more likely to believe that the concepts behind attacks were invented in the OpenBSD tree, and if he had a problem with how NetBSD managed its tree, it was that they wouldn't track OpenBSD fixes.

I don't know what Theo's saying these days. It's been over a decade since I talked to him. But I talked to him a lot in the earlier days of the project, during the original audit, during which time I wrote the OpenBSD advisories, sometimes at the Ship & Anchor in Calgary with him. I would remember this accusation. I never heard it.

Every time I read one of your comments, it is a fascinating look into cryptography. Now you're telling me you were part of the OpenBSD team?

I guess I need to search through your past comments, and a quick Google indicates I missed this.

Every time you comment here you make me feel so lazy. Haha.

Not really. I had commit privileges (a year earlier I had them briefly on FreeBSD, because of the crt0.c bug) but I used them I think twice, once to do something to ping(8) and once to add RADIUS support to tcpdump. I did however write many of the OpenBSD security advisories, and participated in the audit. In 1997, when I moved to Calgary for a few months to work for Secure Networks, Theo was the first person I met there.

To this day I still don't know how to use icb, which if you're an OpenBSD person tells you how much a part of that team I was.

I'm not smart or anything. I'm just (I assume) older than you are. And I got a very early start. That FreeBSD thing happened the year after I graduated high school. I skipped college and went right into dev.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.