Re: our recent security stuff

[Brian Poole <raj_(_at_)_cerias_(_dot_)_purdue_(_dot_)_edu>]

Quoting Peter Valchev (pvalchev_(_at_)_sightly_(_dot_)_net) from  3 February 2003:
> 
> Just send mail here, bugs@, send-pr, whatever.  It will get to us in any
> of those ways... and that's what's important.  But unfortunately we're
> seeing almost no reports, in neither of those ways, so it's irrelevant.

If it helps any, you can try to imagine that all of the users are 
dutifully reporting bugs that propolice has detected in external 
packages to the package developers and that our internal packages are
simply perfect. The first part does actually have some truth to it
though, eg I reported a problem that propolice had detected in the 
IPv6 ACLs recently imported into rsync and got the code fixed before
their recent release of 2.5.6.

This sort of reporting does of course make it a bit harder to 
determine how much impact propolice is having but thus is life.


-b