= On Sat, Dec 6, 2014 at 5:22 AM, <lucio@proxima.alt.za> w= rote:

40 years on, you'd think someon= e would deal with it.

The point I was trying to make = is that it was realised early on (eg, when time-sharing at universities)

that a shared /tmp was a problem. Hacks such = as +s or special schemes for allocating files don't really

address the problem.

Now look at that number: 40. Four decade= s. During that time there has been any amount of foolish

crud added to this or that kernel, distribution ,graphics sub= system, standards, ... but instead of fixing

it after 4 0 years, we get notes explaining that it's the application= 's business, in this case the shell,

or= perhaps the underlying library, to try to address "security issues&qu= ot; instead of fixing it, once for all.

After 40 years (more than a generation).

--001a113a6f741b7857050990614f-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: erik quanstrom Date: Sat, 6 Dec 2014 10:41:52 -0800 To: 9fans@9fans.net Message-ID: In-Reply-To: References: <808ad70d8182ed0f98a57281445d60f3@proxima.alt.za> MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit Subject: Re: [9fans] Debian bug 737206 - rc shell uses insecurely /tmp Topicbox-Message-UUID: 353dd83c-ead9-11e9-9d60-3106f5b1d025 > Now look at that number: 40. Four decades. During that time there > has been any amount of foolish crud added to this or that kernel, > distribution ,graphics subsystem, standards, ... but instead of > fixing it after 4 0 years, we get notes explaining that it's the > application's business, in this case the shell, or perhaps the > underlying library, to try to address "security issues" instead of > fixing it, once for all. After 40 years (more than a generation). +1. this is really an important point. think of all the mega person years you could save by doing the simple, systemic things to make the job of maintaining system easier. - erik From mboxrd@z Thu Jan 1 00:00:00 1970 Message-ID: <54836D78.4060809@ReliableID.com> Date: Sat, 6 Dec 2014 15:56:24 -0500 From: Wes Kussmaul User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.3.0 MIME-Version: 1.0 To: 9fans@9fans.net References: <808ad70d8182ed0f98a57281445d60f3@proxima.alt.za> In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable Subject: Re: [9fans] Debian bug 737206 - rc shell uses insecurely /tmp Topicbox-Message-UUID: 355f38ba-ead9-11e9-9d60-3106f5b1d025 On 12/06/2014 01:41 PM, erik quanstrom wrote: >> instead of >> fixing it, once for all. After 40 years (more than a generation). > +1. this is really an important point. think of all the mega person > years you could save by doing the simple, systemic things to make > the job of maintaining system easier. Think of all the mega person years in... picking one example... the=20 managed security services industry. Mega *billable* person years... Folks, as long as those who care about the integrity of the world's=20 information infrastructure work at the direction of those who do not,=20 nothing will get fixed. --=20 Wes Kussmaul The Authenticity Institute 738 Main Street Waltham, MA 02451 office +1 781 790 1674 mobile +1 781 330 1881 =93Try this fruit, and by the way if a bunch of people collectively calli= ng themselves Arthur Andersen signs something it=92s the same as if a per= son named Arthur Andersen signed it.=94 - The Serpent From mboxrd@z Thu Jan 1 00:00:00 1970 MIME-Version: 1.0 In-Reply-To: References: <808ad70d8182ed0f98a57281445d60f3@proxima.alt.za> Date: Sun, 7 Dec 2014 13:37:11 +1100 Message-ID: From: Bruce Ellis To: Fans of the OS Plan 9 from Bell Labs <9fans@9fans.net> Content-Type: multipart/alternative; boundary=bcaec53f2e37e75e940509972fb6 Subject: Re: [9fans] Debian bug 737206 - rc shell uses insecurely /tmp Topicbox-Message-UUID: 3573f4da-ead9-11e9-9d60-3106f5b1d025 --bcaec53f2e37e75e940509972fb6 Content-Type: text/plain; charset=UTF-8 As in "I have ties older than your /tmp". On 7 December 2014 at 05:29, Charles Forsyth wrote: > > On Sat, Dec 6, 2014 at 5:22 AM, wrote: > >> 40 years on, you'd think someone would deal with it. > > > The point I was trying to make is that it was realised early on (eg, when > time-sharing at universities) > that a shared /tmp was a problem. Hacks such as +s or special schemes for > allocating files don't really > address the problem. > > Now look at that number: 40. Four decades. During that time there has been > any amount of foolish > crud added to this or that kernel, distribution ,graphics subsystem, > standards, ... but instead of fixing > it after 4 0 years, we get notes explaining that it's the application's > business, in this case the shell, > or perhaps the underlying library, to try to address "security issues" > instead of fixing it, once for all. > After 40 years (more than a generation). > --bcaec53f2e37e75e940509972fb6 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

As in "I have ties older than your /tmp".

<= div class=3D"gmail_extra">

On 7 December 2014= at 05:29, Charles Forsyth <charles.forsyth@gmail.com> wrote:

On Sat, Dec 6,= 2014 at 5:22 AM, <lucio@proxima.alt.za> wrote:
40 years on, you'd think someone would deal w= ith it.

The point I was trying to make is that= it was realised early on (eg, when time-sharing at universities)