From nobody Mon Apr 28 07:02:23 2025 X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4ZmDsd09Qwz5typb for ; Mon, 28 Apr 2025 07:02:29 +0000 (UTC) (envelope-from grog@freebsd.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4ZmDsc5dJxz3HJd; Mon, 28 Apr 2025 07:02:28 +0000 (UTC) (envelope-from grog@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1745823748; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=LH31d68Lz9C/UKBFYXTVNbhQIj7fsNmphhQnb/3HViY=; b=GL4L8meqEeWZYFytSdHgcJlWxyrRfMAwxFEjqyaarRiVPMmyHz6Lhz5zQGpU75e+YNLcVC vd8QVsVbfKCHMxGa37593SJqSd8rrGXvsUra2exUnrVtuTBhdbN/qlq7rQVyiwZbLdlwRP 2n1exgHNHZZ5HW1qUITNuJleudv1Sn+J0cg2ytGWV8qp80avtrX0R9FBt5G23psNuJGF3M Rr8xzCphOJmz8UwFeQYKk/ll8s2BReZM3rlVFe+WAa8gmBmt59VY1cl5ALMWKzfj+LR64X Mdqq5pBuvQjpnMSnEOMnxh7YfW3wJk7ecYSBo8lFSd9TlYpMjd2Wtw/e7Dez8A== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1745823748; a=rsa-sha256; cv=none; b=FFAfwhfQIxp56N38ggYSNLp7gSKOPSznE+kKviMHXo+ivkE+g1mhnryZ9oct12cDkN7U/i j3MGHHAi92JLoRqupwDGwYxtdYpLCYZHBxu5Hln23X3UpIsRylv5CDVYUF6WPaf5vhosUS 71jX23q/GdoBplOq1Nu0wXqVVOY9WVEFTGjU4kTyJ+0hUMCBdW7Z26rlvxiwPxWbedWcw/ /NJUOvAFomfTEgFjhNJWMrZPjDI67xqOH0Df8Gw2AQ+BMJREXEWCeskWUOaV3Sj3sd3OA5 md6tH05MN4WXYoLa3YerUTrzXHJpHPwopznoAI8tKhfeMa3nTqzk6lTwiDvysg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1745823748; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=LH31d68Lz9C/UKBFYXTVNbhQIj7fsNmphhQnb/3HViY=; b=QIoFniGYt1ceJ4a1rHXh2ownqaM9I1iMePbYmTCWskJkcey+N5zMoe82xij3NkYI7aVbI7 oMZCDRdF9JoSM5jycNA5FGpIO1ZUtHZvhewbmfwTzxQtFd8NJ5BVIlV2ljEtLtjc5BoB6L yDHSkZd9Vw4dleTkBTC6Z51Xd0Ml794K7c+qGLpHfE161P3q/nIxDSb+HQSRKAkYhXtLia 3qp7KzUsppvfy3AdETuWn0Okn4JaHYUli5fpms0EUr72LAz/FuOXEPWUhizEUWmC40njtQ UtX7xZLUOyuGFqE+hIh5RLUBK36bWrA4lMQXyDiKiF2PGoMvutWFrYYCU1RMDQ== Received: from hydra.lemis.com (121-200-11-253.79c80b.mel.nbn.aussiebb.net [121.200.11.253]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: grog/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4ZmDsb2m57zwj4; Mon, 28 Apr 2025 07:02:27 +0000 (UTC) (envelope-from grog@freebsd.org) Date: Mon, 28 Apr 2025 17:02:23 +1000 From: Greg 'groggy' Lehey To: Daniel Fore Cc: "freebsd-questions@FreeBSD.org" Subject: Re: Is FreeBSD insecure? Message-ID: References: List-Id: User questions List-Archive: https://lists.freebsd.org/archives/freebsd-questions List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-questions@freebsd.org Sender: owner-freebsd-questions@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="mxX/j3pF9RCtp8ye" Content-Disposition: inline In-Reply-To: Organization: The FreeBSD Project Phone: +61-3-5309-0418 Mobile: +61-490-494-038. Use only as instructed. WWW-Home-Page: https://www.FreeBSD X-PGP-Fingerprint: 9A1B 8202 BCCE B846 F92F 09AC 22E6 F290 507A 4223 --mxX/j3pF9RCtp8ye Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Sunday, 27 April 2025 at 0:30:30 +0000, Daniel Fore wrote: > Hi Free BSD faggots, I would ask you to moderate your tone and consider that many people here are from a non-English speaking background and have difficulty understanding the drivel you are spouting. By "faggots" do you mean bassoons or meatballs? And what relationship does it have to your other expletives? > Fuck you for creating a god insecure operating system and got 4chan hacked. I couldn't go to /pol/ you commies. Sorry, I can't parse "/pol/", and I can't see any relationship between your issues and "commies". What I have discovered is that 4chan was running release 10 of FreeBSD when it was breached by unknown means. FreeBSD 10 has not been supported since 31 October 2018. See https://www.freebsd.org/releases/10.4R/announce/ for more details. Security is an important issue nowadays, and no operating system is perfect. The FreeBSD project does everything possible to maintain its good reputation, though so far I haven't seen anything that indicates that the breach was the result of a FreeBSD bug. Was it maybe a third party application, or incorrect configuration? Even if it was a FreeBSD bug, security requires action by the administrators of the site as well. No bug fix will work if you don't install it. Greg Lehey, not speaking for the FreeBSD Project -- When replying to this message, please copy the original recipients. If you don't, I may ignore the reply or reply to the original recipients. For more information, see http://www.lemis.com/questions.html Sent from my desktop computer. See complete headers for address and phone numbers. This message is digitally signed. If your Microsoft mail program reports problems, please read http://lemis.com/broken-MUA.php --mxX/j3pF9RCtp8ye Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iF0EARECAB0WIQSaG4ICvM64RvkvCawi5vKQUHpCIwUCaA8n/wAKCRAi5vKQUHpC IzOqAKCF+HTC+ejtOc9e4W7A4SqHjRGYRgCeIg7UPRc8WJvA0M6aHXNhIG7EbQ8= =nHoo -----END PGP SIGNATURE----- --mxX/j3pF9RCtp8ye--