From mboxrd@z Thu Jan  1 00:00:00 1970
Message-ID: <82c890d00710281022v44acd84boba98d3b16caac6e6@mail.gmail.com>
Date: Sun, 28 Oct 2007 19:22:37 +0200
From: "Gabriel Diaz" <gabidiaz@gmail.com>
To: "Fans of the OS Plan 9 from Bell Labs" <9fans@cse.psu.edu>
Subject: Re: [9fans] security
In-Reply-To: <4724B911.9080202@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <2cc6e509319590eee5371dc0def82e1a@9netics.com>
	<4724B007.6090908@gmail.com>
	<d1c554290710280859o1dfe24fapa73e3134cce4b794@mail.gmail.com>
	<4724B911.9080202@gmail.com>
Topicbox-Message-UUID: dd0b8264-ead2-11e9-9d60-3106f5b1d025

hello

I think having someone thinking the way Don and Tim do could help in
general (actually it already helped isn't it?)

If from those thoughts a bug or security hole is fixed, great, may be
those thoughts sounds too paranoid, but i can't see why that's bad.

Of course that do not means everybody should think the same way, I
suppose Erik's point was to relax that paranoid, and return to the
path issue :-?

Change the path default value to (bin .)  looks like a painless change
(improvement :-?) and it will not broke anything, isn't it?

Discussing security on 9fans is funnier when related to plan9 more
directly than when trying to address "unsolvable" problems like the
user education :-)

slds.

gabi




On 10/28/07, don bailey <don.bailey@gmail.com> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> > ok, so can I suppose you know how to do that? if so, do you have a
> > better idea for sandboxing? if not, maybe it should be good for you to
> > think in terms of what you or someone else already got working instead
> > of saying every little thing that comes on your mind.
> >
>
> Sigh. Thanks for assuming I'm just making random comments.
>
> I guess my last exploit didn't teach anyone anything.
> "OHMYGODZ A KERNEL 0DAY FOR PLAN 9??!?!!?!"
>
> You can't segment the Plan 9 kernel. You can only make it
> harder to use.
>
> As I stated in my last e-mail, apparently noone here is
> interested in listening, so I'm done trying to prove a
> point for now. Next time it'll come in binary form.
>
> Cheers,
> D
>
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
>
> iD8DBQFHJLkPyWX0NBMJYAcRAkTnAJ9h7uaml9QPfmRBHD5qw8TJ6bbRXgCfWRH5
> Q7f1kGhBrb+FaLWC8yGXfjE=
> =2BYc
> -----END PGP SIGNATURE-----
>