Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20261108133603.GK23438@brightrain.aerifal.cx>
Date: Sun, 8 Nov 2026 08:36:03 -0500
From: Rich Felker <dalias@...c.org>
To: X L <idealeer521@...il.com>
Cc: musl@...ts.openwall.com
Subject: Re: musl's DNS TxID is a deterministic function of the
 realtime clock, with no additional entropy

On Sun, Nov 08, 2026 at 06:28:04PM +0800, X L wrote:
> Dear Teams,
> 
> We found some bugs/vulnerabilities of your software. Please review the
> technical details and mandatory mitigation steps below.
> Summary

Please do not sent LLM slop to this project. The only reason I
approved your message in the list moderation queue is because I want
folks to see the kind of slop we're being inundated with and that it
is unwelcome.

It is hostile and ignorant to mail a project claiming to have found a
bug/vulnerability without a threat model in mind and without
understanding whether there is any contract (for "bug") or threat
model (for "vuln") the project intends to support where the behavior
compromises that.

And understanding your chatbot is not capable of having.

Rich

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.