On Tuesday, September 11, 2012 5:38:15 am Doug Barton wrote:
> >>> Also, both jbh <201209050944.38042.jhb@freebsd.org> and RW
> >>> <20120905021248.5a17ace9@gumby.homeunix.com> feel this likely does
> >>> happen just from reading the code. Please explain from either
> >>> (1) a code reading, or (2) your own instrumented kernel that dropping
> >>> of input to /dev/random does not occur.
> >>
> >> Once again, you're the one asserting that there is a problem with a
> >> system that has worked well for 12 years, so the burden of proof is on
> >> you. That said, I'm interested in Arthur's evidence.
> >
> > Are you not a sufficient C programmer that you couldn't hack this up
> > yourself with the amount of time you've spent arguing it?
>
> Seriously. Stop being such an ass.
>
> I've said lots of times now that my FreeBSD time is limited, and THE
> BURDEN OF PROOF IS ON YOU. If you think it's easy, whip it up. If you're
> right, the truth will benefit all of us.
Having watched this thread mostly from the outside, I have to say this much:
this is a really rediculous argument that works both ways. Just because we
don't have a documented vulnerability doesn't mean it doesn't exist either.
Also, you are clearly wrong about /dev/random dropping input and refuse to
admit that. To me that taints all your other claims and really weakens your
arguments.
--
John Baldwin
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"