Re: update on the djbdns bugs? (fwd)

On Sun, 5 Oct 2008, Kevin Day wrote:

> For &*@%#'s sake, Dean... It's not a contest to see who can figure  
> something out first and make a post about it.

Surely not.  These simple fixes wouldn't take weeks to do.

But most people would start by engaging the support community, rather
than trying keep it (just the DJBDNS changes) mostly secret until ONE
person figures out what THEY think is the right fix.  I'm not alone in
the criticism of your failures, so if you haven't been able to figure
that out, maybe you should quit working on such things.

> You had engaged Dan Kaminsky(who I've only first talked to in the last  
> couple of months), Paul Theodoropoulos (who I first talked to in the  
> last few days) and I in an off-list series of accusations about some  
> kind of conspiracy with ISC or a "BIND Cartel". 

Wow. Not exactly an honest characterization of the messages. Kaminsky
started by asserting he has no association with Vixie or BIND.  I
responded with a short description of previous efforts deceiving people
concerning associations with the 'BIND company' as DJB terms it, and the
"BIND Cartel" as I term it.

> You also complained (rightly so) that I was taking too long to divulge
> anything.

And you still haven't provided anything. (after several more days of 
waiting.)

> I explained in a bit more detail why I wasn't able to right away. You  
> continued asserting that Dan and I were somehow trying to make djbdns  
> look bad, so we privately let you in on a little bit of it. 

Wow.  What a misrepresentation.  I wonder if I participated in the same
discussion as you.

> You still weren't convinced, so I offer you a draft copy of what I was
> about to release, only asking for your assurance that you weren't
> going to leak it before a few notifications happened. No response at
> all from you until I see this.

What a load of crap.  My last message to [email protected] was send
@17:11 EDT.

Your message to me came at 18:00 EDT, 49 minutes later.

Received: from tokyo01.jp.mail.your.org (tokyo01.jp.mail.your.org 
[204.9.54.5])
        by piper.av8.net (8.11.6/8.11.6) with ESMTP id m94M0he27065
        for <[email protected]>; Sat, 4 Oct 2008 18:00:43 -0400
Received: from tokyo01.jp.mail.your.org (localhost.your.org [127.0.0.1])
        by tokyo01.jp.mail.your.org (Postfix) with ESMTP id 
4DA902AD55AF;
        Sat,  4 Oct 2008 22:00:41 +0000 (UTC)



> I'd already asked you once not to post a private reply onto the list
> before this.  Other than parroting a few things we said about spoofing
> attacks in general, the only thing you've done here is ensure no-one
> working on something security related shares anything with you
> privately again.

Even more crap above.


> For everybody else watching:
> 
> I am very sorry for the delays in bringing everything out in the open.  
> I hadn't intended on saying a word until it was all public. 

Its been public for weeks, months. 


-- 
Av8 Internet   Prepared to pay a premium for better service?
www.av8.net         faster, more reliable, better service
617 344 9000