• # outil de sécurité ou d'insécurité ?

    Posté par (Mastodon) . En réponse au journal Ethereal change de nom.... Évalué à 1.

    C'est drôle de comparer les propos de Wireshark :


    Sniffing Problems A Mile Away
    The Ethereal network protocol analyzer has changed its name to Wireshark.

    The name might be new, but the software is the same. Wireshark's powerful features make it the tool of choice for network troubleshooting, protocol development, and education worldwide.

    Wireshark was written by networking experts around the world, and is an example of the power of open source. It runs on Windows, Linux, UNIX, and other platforms.


    avec ceux de openbsd :


    Revision 1.4, Wed Jul 14 21:52:26 2004 UTC (23 months ago) by pvalchev
    Branch: MAIN
    CVS Tags: HEAD
    Changes since 1.3: +0 -0 lines
    FILE REMOVED

    Remove ethereal from the ports tree. Right during 3.5, it had more than
    a dozen remote holes being fixed, that we shipped with. Weeks later
    things have not improved, and there continue to be problems reported
    to bugtraq, and respective band-aids - but it is clear the ethereal
    team does not care about security, as new protocols get added, and
    nothing gets done about the many more holes that exist.

    Maybe someone will at least privilege separate this one day, and then
    the OpenBSD stance with respect to this may change.

    Encouraging people to run broken software by distributing packages
    with known security holes is not desired by any of us.