Remix.run Logo
rs_rs_rs_rs_rs 3 hours ago

The usable qmail got owned by AI already, the unusable one not yet!

tptacek 3 hours ago | parent [-]

Not by AI, but by humans awhile ago. I think Qualys weaponized a wontfix LP64 integer overflow in it just a couple years ago?

rs_rs_rs_rs_rs 2 hours ago | parent [-]

The Calif people found a nice bug in a qmail fork(what I consider usable qmail) some weeks ago.

tptacek 2 hours ago | parent [-]

Right, and that fork is the only version of qmail people still run, and the bug they found was extremely funny given Bernstein's original qmail design (it was, if I remember right, a popen(3) vulnerability --- something that never would have showed up in Bernstein's code, but that's what happens when code gets abandoned, it gets picked up by people who don't really understand it). But it's hard to charge that vulnerability against the original qmail design.

(I don't think anyone should run qmail.)