compilation bug fix for bsds

Sam Trenholme strenholme.usenet at gmail.com
Mon Jan 10 10:22:54 EST 2011


>> there are still many people running unmodified [djbdns] 1.05.

> Heh, well, in those cases, that sounds a lot like a poor sys admin,
> I imagine it's kind of obvious that using unmaintained software that
> hasn't been even updated in 10 years is a bad idea regardless.

It's obvious to you.  It's obvious to me.  However, we're not wearing
the blinders that people under the influence of the djb reality
distortion field wear.  For years, their mantra was that djb somehow
had some builtin magic pixie dust that made his software 100% secure
and never need updating.

They started to have to bend reality to continue to believe this lie.
Backscatter spam is not a security problem is probably the first lie
they had to tell themselves.  Then they had to convince themselves
that not catching SIGPIPE is not a security problem.  Once djb himself
admitted that the AXFR issue Dempsky found was a security issue, some
people moved away from the reality distortion field, but others either
haven't heard of this bug or feel it's djbdns' only bug.

One of my pet peeves is people who tell themselves lie to believe some
groupthink.  I get annoyed at pirates who tell themselves "copyright
infringement is morally OK in the 'new economy'"; I get annoyed at
audiophiles who tell themselves "double-blind studies are not
scientifically valid"; as I Christian, I find young-earth creationists
very annoying.  And I get annoyed at people who use self-delusions to
justify using outdated and unmaintained (branches of) software.

> Maybe you should bring the Slashdot community up to speed
> on the matter :-)

I've made a decision to no longer post to Slashdot.  The place has
become too much of a flamefest.

But, instead, I have blogged about it:

http://samiam.org/blog/

More to the point, I have started to integrate your patches in to
MaraDNS.  I have already added your duende patch to Deadwood:

http://maradns.org/deadwood/snap/

If you could, take a look at it and let me know if it works for you.

- Sam


More information about the list mailing list