Rocksolid Light

Welcome to Rocksolid Light

mail  files  register  newsreader  groups  login

Message-ID:  

The clothes have no emperor. -- C. A. R. Hoare, commenting on ADA.


computers / comp.os.vms / Re: A few tools for improving software security

SubjectAuthor
* Re: A few tools for improving software securityArne Vajhøj
`* Re: A few tools for improving software securityArne Vajhøj
 +- Re: A few tools for improving software securityCraig A. Berry
 `* Re: A few tools for improving software securityLawrence D'Oliveiro
  `* Re: A few tools for improving software securityLawrence D'Oliveiro
   `* Re: A few tools for improving software securitySimon Clubley
    +* Re: A few tools for improving software securityDan Cross
    |`* Re: A few tools for improving software securitySimon Clubley
    | `* Re: A few tools for improving software securityDave Froble
    |  +* Re: A few tools for improving software securitybill
    |  |+- Re: A few tools for improving software securityDave Froble
    |  |`- Re: A few tools for improving software securityLawrence D'Oliveiro
    |  `* Re: A few tools for improving software securitySimon Clubley
    |   `- Re: A few tools for improving software securityDave Froble
    +- Re: A few tools for improving software securitySingle Stage to Orbit
    +* Re: A few tools for improving software securityStephen Hoffman
    |`* Re: A few tools for improving software securityLawrence D'Oliveiro
    | `* Re: A few tools for improving software securityDave Froble
    |  `* Re: A few tools for improving software securityArne Vajhøj
    |   `* Re: A few tools for improving software securityDave Froble
    |    +* Re: A few tools for improving software securityDan Cross
    |    |+- Re: A few tools for improving software securityDan Cross
    |    |+- Re: A few tools for improving software securityDave Froble
    |    |+- Re: A few tools for improving software securitybill
    |    |`* Re: A few tools for improving software securitykludge
    |    | `- Re: A few tools for improving software securityLawrence D'Oliveiro
    |    `* Re: A few tools for improving software securitySimon Clubley
    |     `* Re: A few tools for improving software securityChris Townley
    |      `* Re: A few tools for improving software securitySimon Clubley
    |       `- Re: A few tools for improving software securityArne Vajhøj
    `- Re: A few tools for improving software securityLawrence D'Oliveiro

Pages:12
Re: A few tools for improving software security

<uof4t2$3c1i2$1@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33205&group=comp.os.vms#33205

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: arne@vajhoej.dk (Arne Vajhøj)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Fri, 19 Jan 2024 19:42:09 -0500
Organization: A noiseless patient Spider
Lines: 76
Message-ID: <uof4t2$3c1i2$1@dont-email.me>
References: <memo.20240119214658.3116S@jgd.cix.co.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Sat, 20 Jan 2024 00:42:10 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="893027ec0e7835006e8856c6b317aedf";
logging-data="3540546"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19MhizZQIEU0qo7zepuWIlcuaovbhRvyVI="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:iD+J2vtO28JH583jzrlqZD0FrGg=
In-Reply-To: <memo.20240119214658.3116S@jgd.cix.co.uk>
Content-Language: en-US
 by: Arne Vajhøj - Sat, 20 Jan 2024 00:42 UTC

On 1/19/2024 4:46 PM, John Dallman wrote:
> Hundreds of researchers are only a few times as effective as one. I've
> done some of this, and worked with people who do more: given good tools,
> a few man-months can make significant improvements. In the order in which
> they were used:
>
> Valgrind is a binary instrumentation tool: it decompiles an executable
> into a higher-level abstract machine language, inserts instrumentation
> and recompiles that into the machine language. It doesn't need source,
> although it does need debug symbols. https://valgrind.org/ It gets used
> for building many kinds of execution monitors and checking tools.
>
> The only one I've used is Memcheck, which finds usage of uninitialised
> data, by the brute-force technique of tracking the initialisation status
> of every byte of memory in the process. This is too slow to use in
> production, but I spent a few months tracking down and fixing all the
> uses of uninitialised memory, and we basically stopped getting
> unrepeatable run-time errors. Now one of the junior engineers keeps it
> running through all our tests on a regular basis and fixing newly added
> uses of uninitialised data.
>
> Our QA team use another Valgrnd tool, Callgrind, to track which files and
> functions are called by all of our tests. Keeping this up to date keeps a
> few machines busy full-time, but it's invaluable. The data is kept in an
> SQL database in inverted form, so when developers change source, they can
> find out which test cases go through the changed files in seconds, and
> run those test cases to find and fix regressions before they release
> changes into source-management.
>
> Valgrind runs on Unix-like operating systems. I run it on x86-64 Linux,
> which is by far the most-used platform.

Those tools are mostly C/C++ centric right?

If one would be a little cynical: tools to mitigate those languages
lack of the strictness found in other languages.

> Static analysis starts with a compile-like process, in which you run all
> your source through an analysis tool that behaves like a compiler.
> There's then a pretty heavyweight process of matching up all the
> functions, variables and possible execution paths, and then you have data
> that can be used to spot security problems, via further automatic
> analysis. It's kind of like "lint" on a whole-program basis. The tool I
> use is Coverity, which is commercial, and got picked for us by the larger
> company. It isn't brilliant, but it works. It runs on Windows, Linux and
> Mac.
>
> <https://www.synopsys.com/software-integrity/static-analysis-tools-sast/co
> verity.html>

I have heard good things about Coverity.

There are alternatives. Commercial: CAST, Klocwork etc.. Open source:
Sonarcube, PMD etc..

Such tools can actually find a lot.

> Fuzz testing is the main thing that security researchers do. Digging
> through disassembly listings for vulnerabilities by eye is very slow and
> unreliable. You need to be able to run the software you're "fuzzing" and
> to be able to feed it a data file. You use a fuzz testing tool which runs
> the software and monitors it for segmentation violations and other
> exceptions. It also mutates the data file, by modifying, inserting and
> removing bytes. A bit of correlation analysis lets it find its way to
> minimal test cases for exceptions. This burns up a fair bit of CPU power:
> people in my team have had four or eight threads on an old x86-64 box
> running for about a year. In that time, we've found and fixed a bit more
> than one defect per working day.
>
> There are lots of frameworks for fuzzing, but AFL
> <https://en.wikipedia.org/wiki/American_Fuzzy_Lop_(software)> is
> considered pretty good, and is what we use.

Arne

Re: A few tools for improving software security

<uogs7c$3o3e0$2@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33208&group=comp.os.vms#33208

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!usenet.network!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: arne@vajhoej.dk (Arne Vajhøj)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Sat, 20 Jan 2024 11:26:20 -0500
Organization: A noiseless patient Spider
Lines: 26
Message-ID: <uogs7c$3o3e0$2@dont-email.me>
References: <uof4t2$3c1i2$1@dont-email.me>
<memo.20240120081044.3116T@jgd.cix.co.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Sat, 20 Jan 2024 16:26:20 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="893027ec0e7835006e8856c6b317aedf";
logging-data="3935680"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/HOE76pFOX2fatRG6vMucgL1jqlinWdec="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:zr0seSHQHtCz+J+z7XUJzfhRvrk=
Content-Language: en-US
In-Reply-To: <memo.20240120081044.3116T@jgd.cix.co.uk>
 by: Arne Vajhøj - Sat, 20 Jan 2024 16:26 UTC

On 1/20/2024 3:10 AM, John Dallman wrote:
> In article <uof4t2$3c1i2$1@dont-email.me>, arne@vajhoej.dk (Arne Vajhøj)
> wrote:
>> On 1/19/2024 4:46 PM, John Dallman wrote:
>>> Valgrind runs on Unix-like operating systems. I run it on x86-64
>>> Linux, which is by far the most-used platform.
>>
>> Those tools are mostly C/C++ centric right?
>
> * Valgrind works on binaries and has no idea what HLL you used. Most
> fuzzers are the same AFAIK.

But native code right.

When working on binaries the source languages obviously
does not matter. But for *nix/Windows there is a pretty
good chance that native code is C or C++.

I wonder how difficult it would be to get it running
on VMS x86-64. ELF image format and x86-64 instruction
set are already done. But I assume it would need to know
about various RTL.

Arne

Re: A few tools for improving software security

<uoh7v0$3q3cb$1@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33211&group=comp.os.vms#33211

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!news.samoylyk.net!usenet.goja.nl.eu.org!weretis.net!feeder8.news.weretis.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: craigberry@nospam.mac.com (Craig A. Berry)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Sat, 20 Jan 2024 13:46:40 -0600
Organization: A noiseless patient Spider
Lines: 30
Message-ID: <uoh7v0$3q3cb$1@dont-email.me>
References: <uogs7c$3o3e0$2@dont-email.me>
<memo.20240120165643.3116X@jgd.cix.co.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Sat, 20 Jan 2024 19:46:40 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="d2184a42aef9446f183a82085cc9ba4c";
logging-data="4001163"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+E2LgubEb6I4KSC9eST9qQRPZXug/4EVU="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:x7HxVrnvxJysxbnUGKh5oqGMIng=
In-Reply-To: <memo.20240120165643.3116X@jgd.cix.co.uk>
Content-Language: en-US
 by: Craig A. Berry - Sat, 20 Jan 2024 19:46 UTC

On 1/20/24 10:56 AM, John Dallman wrote:
> In article <uogs7c$3o3e0$2@dont-email.me>, arne@vajhoej.dk (Arne Vajhøj)
> wrote:
>
>> I wonder how difficult it would be to get it running
>> on VMS x86-64. ELF image format and x86-64 instruction
>> set are already done. But I assume it would need to know
>> about various RTL.
>
> It certainly needs to know about run-times. Valgrind itself is C. The
> project's platforms page says:
>
> Windows is not under consideration because porting to it would require
> so many changes it would almost be a separate project. ... Also,
> non-open-source OSes are difficult to deal with; being able to see
> the OS and associated (libc) source code makes things much easier.
>
> VMS is not Windows, but their respective difference from Linux are on a
> similar scale. VSI could presumably port it, but it is clearly a long way
> from being the most urgent thing for them to do.

AddressSanitizer might be more possible given the LLVM-based compilers
on x86. But I believe -fsanitize requires a link-time component, and it
isn't clear to me whether it could operate on the downstream side of the
GEM2IR translations, and if not, it could only work for clang. And a lot
of the OS modules written in C are probably not clang-ready at this
point. So it wouldn't be a small project. Whether it would be a big
project or a humongous one I don't know.

Re: A few tools for improving software security

<uohthp$3t9gu$1@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33213&group=comp.os.vms#33213

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!nntp.comgw.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: ldo@nz.invalid (Lawrence D'Oliveiro)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Sun, 21 Jan 2024 01:55:06 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 7
Message-ID: <uohthp$3t9gu$1@dont-email.me>
References: <uogs7c$3o3e0$2@dont-email.me>
<memo.20240120165643.3116X@jgd.cix.co.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Sun, 21 Jan 2024 01:55:06 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="942a1f970482f2e4dbf1b31185d2ff4b";
logging-data="4105758"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1926Bc7szlWW2oi4v+Ylx9D"
User-Agent: Pan/0.155 (Kherson; fc5a80b8)
Cancel-Lock: sha1:KtF2NbjDhIm67/ae8ZdhHZGoixY=
 by: Lawrence D'Oliv - Sun, 21 Jan 2024 01:55 UTC

On Sat, 20 Jan 2024 16:56 +0000 (GMT Standard Time), John Dallman wrote:

> VSI could presumably port [valgrind], but it is clearly a long
> way from being the most urgent thing for them to do.

On the other hand, it would be something else that they could get
essentially for free with a Linux port.

Re: A few tools for improving software security

<uok2o7$cgf7$6@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33215&group=comp.os.vms#33215

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: ldo@nz.invalid (Lawrence D'Oliveiro)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Sun, 21 Jan 2024 21:36:08 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 7
Message-ID: <uok2o7$cgf7$6@dont-email.me>
References: <uohthp$3t9gu$1@dont-email.me>
<memo.20240121101004.3116Y@jgd.cix.co.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Sun, 21 Jan 2024 21:36:08 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="942a1f970482f2e4dbf1b31185d2ff4b";
logging-data="410087"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+ecoSyc34kWUJWkrD73pbj"
User-Agent: Pan/0.155 (Kherson; fc5a80b8)
Cancel-Lock: sha1:rtMITmff2qPoIau8ZgX045NwLt4=
 by: Lawrence D'Oliv - Sun, 21 Jan 2024 21:36 UTC

On Sun, 21 Jan 2024 10:10 +0000 (GMT Standard Time), John Dallman wrote:

> That's two quite hard
> things, and starting on them now makes less sense than carrying on with
> the current strategy, for good or ill.

I think that’s called the “sunk-cost fallacy”.

Re: A few tools for improving software security

<uolqc2$o1rq$4@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33224&group=comp.os.vms#33224

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!rocksolid2!news.neodome.net!news.mixmin.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: clubley@remove_me.eisner.decus.org-Earth.UFP (Simon Clubley)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Mon, 22 Jan 2024 13:25:22 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 28
Message-ID: <uolqc2$o1rq$4@dont-email.me>
References: <uohthp$3t9gu$1@dont-email.me> <memo.20240121101004.3116Y@jgd.cix.co.uk> <uok2o7$cgf7$6@dont-email.me>
Injection-Date: Mon, 22 Jan 2024 13:25:22 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="54b7871daa3fa8bd7d6c948100edd384";
logging-data="788346"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18JtTdDJs9PoiFl/VNjO7/oVgGIPkZQv38="
User-Agent: slrn/0.9.8.1 (VMS/Multinet)
Cancel-Lock: sha1:xIvXvTjtRHWOgbNGPQ0i6oI98uQ=
 by: Simon Clubley - Mon, 22 Jan 2024 13:25 UTC

On 2024-01-21, Lawrence D'Oliveiro <ldo@nz.invalid> wrote:
> On Sun, 21 Jan 2024 10:10 +0000 (GMT Standard Time), John Dallman wrote:
>
>> That's two quite hard
>> things, and starting on them now makes less sense than carrying on with
>> the current strategy, for good or ill.
>
> I think that?s called the ?sunk-cost fallacy?.

So VSI's choices are to either continue selling x86-64 systems to customers
and complete the missing bits, or they stop selling systems for 3 years
while they write a migration tool from the ground up for something that
will never be as close in operation as the first option above.

Hmmm, I wonder which option they will choose ? :-)

Lawrence, you manage to make the current bunch of extreme zealots on both
sides of the political landscape in the US seem reasonable.

Simon.

PS: Although given it's looking likely that one of those groups will be
heading back into power in a year's time, I wonder how I (and the rest of
the world) will feel about that then...

--
Simon Clubley, clubley@remove_me.eisner.decus.org-Earth.UFP
Walking destinations on a map are further away than they appear.

Re: A few tools for improving software security

<uolr03$nal$1@reader1.panix.com>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33225&group=comp.os.vms#33225

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!usenet.network!newsfeed.endofthelinebbs.com!panix!.POSTED.spitfire.i.gajendra.net!not-for-mail
From: cross@spitfire.i.gajendra.net (Dan Cross)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Mon, 22 Jan 2024 13:36:03 -0000 (UTC)
Organization: PANIX Public Access Internet and UNIX, NYC
Message-ID: <uolr03$nal$1@reader1.panix.com>
References: <uohthp$3t9gu$1@dont-email.me> <memo.20240121101004.3116Y@jgd.cix.co.uk> <uok2o7$cgf7$6@dont-email.me> <uolqc2$o1rq$4@dont-email.me>
Injection-Date: Mon, 22 Jan 2024 13:36:03 -0000 (UTC)
Injection-Info: reader1.panix.com; posting-host="spitfire.i.gajendra.net:166.84.136.80";
logging-data="23893"; mail-complaints-to="abuse@panix.com"
X-Newsreader: trn 4.0-test77 (Sep 1, 2010)
Originator: cross@spitfire.i.gajendra.net (Dan Cross)
 by: Dan Cross - Mon, 22 Jan 2024 13:36 UTC

In article <uolqc2$o1rq$4@dont-email.me>,
Simon Clubley <clubley@remove_me.eisner.decus.org-Earth.UFP> wrote:
>On 2024-01-21, Lawrence D'Oliveiro <ldo@nz.invalid> wrote:
>> On Sun, 21 Jan 2024 10:10 +0000 (GMT Standard Time), John Dallman wrote:
>>
>>> That's two quite hard
>>> things, and starting on them now makes less sense than carrying on with
>>> the current strategy, for good or ill.
>>
>> I think that?s called the ?sunk-cost fallacy?.
>
>So VSI's choices are to either continue selling x86-64 systems to customers
>and complete the missing bits, or they stop selling systems for 3 years
>while they write a migration tool from the ground up for something that
>will never be as close in operation as the first option above.
>
>Hmmm, I wonder which option they will choose ? :-)
>
>Lawrence, you manage to make the current bunch of extreme zealots on both
>sides of the political landscape in the US seem reasonable.

I would suggest respectfully to stop feeding the troll. Or, as
I suspect he's less a troll than just a crank, perhaps stop
turning the crank.

- Dan C.

Re: A few tools for improving software security

<97ae6b48d65625eec25b90db8a078ae3a198b800.camel@munted.eu>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33226&group=comp.os.vms#33226

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!news.1d4.us!usenet.goja.nl.eu.org!weretis.net!feeder8.news.weretis.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: alex.buell@munted.eu (Single Stage to Orbit)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Mon, 22 Jan 2024 14:30:24 +0000
Organization: One very high maintenance cat
Lines: 8
Message-ID: <97ae6b48d65625eec25b90db8a078ae3a198b800.camel@munted.eu>
References: <uohthp$3t9gu$1@dont-email.me>
<memo.20240121101004.3116Y@jgd.cix.co.uk> <uok2o7$cgf7$6@dont-email.me>
<uolqc2$o1rq$4@dont-email.me>
Reply-To: alex.buell@munted.eu
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Injection-Info: dont-email.me; posting-host="f1a95efacc307bb2da2d4328467a922a";
logging-data="827553"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/vwtO3PD9yK5WXzMzOquxvXe6Ux7Bro7I="
User-Agent: Evolution 3.50.2
Cancel-Lock: sha1:b3QIVfvIVs7y4cuJMRtSKLisklk=
In-Reply-To: <uolqc2$o1rq$4@dont-email.me>
Autocrypt: addr=alex.buell@munted.eu; prefer-encrypt=mutual;
keydata=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
oM21NnHfo7RohDWVnYxAbHrErJjrym5yRxgWN0ccrsoeza/8m+G+my78KFVUtoTn9QmDDtaHrp7I2XGZ4r8rpvtCBxg4IFUqHg0ESI2/4pHw8n4uyD9e7yuZ+0zsLzMhloNEZ8ABe2/peVeir9eEVGqXTmixiLgVvPkTBi6xa4FmTqG3m0woUz8BXzCT1hoHtTPQ4UxGgcp8ITPUy1dJKUsqqY1uPSuLA06tGPQj7w/0j1HTuyct5NNHFDpDvrQdi/qr4CEk3WVWAEiv+d07DumSKnb6k5OySXSK128/oE2FXKsM1gNgFpK2SqEqfylxpAtJmRWNcV7Dyaqci22xRgBnU9X5iC2N9eXvaliEkEGBECAAkFAkSBefECGwwACgkQE/TNcxSCX46DQQCdH57pYA1kE373R9WsUN6+OXpqD8gAn0oKFduLKG48YhT7256Jo/7ZDeSU
 by: Single Stage to Orbi - Mon, 22 Jan 2024 14:30 UTC

On Mon, 2024-01-22 at 13:25 +0000, Simon Clubley wrote:
> Lawrence, you manage to make the current bunch of extreme zealots on
> both sides of the political landscape in the US seem reasonable.

<sfx: Muttley sniggering>
--
Tactical Nuclear Kittens

Re: A few tools for improving software security

<uome7d$ruup$1@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33227&group=comp.os.vms#33227

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!news.niel.me!news.gegeweb.eu!gegeweb.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: seaohveh@hoffmanlabs.invalid (Stephen Hoffman)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Mon, 22 Jan 2024 14:04:13 -0500
Organization: HoffmanLabs LLC
Lines: 61
Message-ID: <uome7d$ruup$1@dont-email.me>
References: <memo.20240119214658.3116S@jgd.cix.co.uk> <uof4t2$3c1i2$1@dont-email.me> <memo.20240120081044.3116T@jgd.cix.co.uk> <uogs7c$3o3e0$2@dont-email.me> <memo.20240120165643.3116X@jgd.cix.co.uk> <uohthp$3t9gu$1@dont-email.me> <memo.20240121101004.3116Y@jgd.cix.co.uk> <uok2o7$cgf7$6@dont-email.me> <uolqc2$o1rq$4@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Info: dont-email.me; posting-host="4b08cafc74b8a0df3926f828d9f48625";
logging-data="916441"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+Sq/YpcAg2ifQsCE4STEwEfG/xVuDxDwU="
User-Agent: Unison/2.2
Cancel-Lock: sha1:aTewsbOL3jQqsNmfLvtP42L+aK8=
 by: Stephen Hoffman - Mon, 22 Jan 2024 19:04 UTC

On 2024-01-22 13:25:22 +0000, Simon Clubley said:

> On 2024-01-21, Lawrence D'Oliveiro <ldo@nz.invalid> wrote:
>> On Sun, 21 Jan 2024 10:10 +0000 (GMT Standard Time), John Dallman wrote:
>>
>>> That's two quite hard things, and starting on them now makes less sense
>>> than carrying on with the current strategy, for good or ill.
>>
>> I think that?s called the ?sunk-cost fallacy?.
>
> So VSI's choices are to either continue selling x86-64 systems to
> customers and complete the missing bits, or they stop selling systems
> for 3 years while they write a migration tool from the ground up for
> something that will never be as close in operation as the first option
> above.

Three years' effort is barely a start on the API coverage needed for a
non-trivial app; for a porting library akin to Sector 7.

I'd expect the "kernel transplant" approach to take most of a decade.
If it is even achievable without causing existing customers to migrate
their own apps else-platform; either to Sector 7, or an incremental app
port, or a wholesale port as has happened elsewhere.

Running on multiple platforms (past x86-64 and AArch64) isn't a big
selling point for commercial installations either, and that support
adds vendor testing and qualification and customer support costs for
each of the platforms. And adds costs for ISVs.

And all for no obvious benefit. Yeah, a kernel transplant would
probably make another port (AArch64 or maybe RISC-V) in a decade or two
slightly easier. But that at the cost of a lack of focus; of customers
getting fewer enhancements for another decade, and at the cost of
customers simply waiting for the next port, and with all the usual
disruptions and delays of a port for those that do migrate.

Not gonna happen. Not until well after VSI is a whole lot bigger and a
whole lot better funded, and is encountering some hard limits in their
chosen hardware platform and tooling.

And I still haven't heard a sales pitch for which kernel to pick, as
Linux is but one of many fine choices. And GPL'd Linux quite possibly
not the best choice for grafting a closed-source commercial platform.

> Hmmm, I wonder which option they will choose ? :-)

This whole scheme reminds me of a sales deal from some years ago, where
a vendor migrated a customer off the vendor's own proprietary platform,
and onto a commodity platform.

The customer was quite happy with their purchase. The vendor did get
that last server hardware sale, but at no small migration cost, and
with ~no long-term future with that customer.

TL;DR: epic troll, or epic dumb.

--
Pure Personal Opinion | HoffmanLabs LLC

Re: A few tools for improving software security

<uomu2g$uj61$1@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33229&group=comp.os.vms#33229

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: ldo@nz.invalid (Lawrence D'Oliveiro)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Mon, 22 Jan 2024 23:34:41 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 7
Message-ID: <uomu2g$uj61$1@dont-email.me>
References: <uohthp$3t9gu$1@dont-email.me>
<memo.20240121101004.3116Y@jgd.cix.co.uk> <uok2o7$cgf7$6@dont-email.me>
<uolqc2$o1rq$4@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Mon, 22 Jan 2024 23:34:41 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="b483129fb1b43c5ca91b5930e33c4fdf";
logging-data="1002689"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX180D/eMBPHa7QtdOxiG+Clg"
User-Agent: Pan/0.155 (Kherson; fc5a80b8)
Cancel-Lock: sha1:mbhxUJ5r07IfBXHqpoqBw/CHS34=
 by: Lawrence D'Oliv - Mon, 22 Jan 2024 23:34 UTC

On Mon, 22 Jan 2024 13:25:22 -0000 (UTC), Simon Clubley wrote:

> Lawrence, you manage to make the current bunch of extreme zealots on
> both sides of the political landscape in the US seem reasonable.

*Yawn* Your repeated attempts at personal attacks on me are just getting
tiresome.

Re: A few tools for improving software security

<uooe1t$19j61$1@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33231&group=comp.os.vms#33231

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!feeder8.news.weretis.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: clubley@remove_me.eisner.decus.org-Earth.UFP (Simon Clubley)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Tue, 23 Jan 2024 13:13:33 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 37
Message-ID: <uooe1t$19j61$1@dont-email.me>
References: <uohthp$3t9gu$1@dont-email.me> <memo.20240121101004.3116Y@jgd.cix.co.uk> <uok2o7$cgf7$6@dont-email.me> <uolqc2$o1rq$4@dont-email.me> <uolr03$nal$1@reader1.panix.com>
Injection-Date: Tue, 23 Jan 2024 13:13:33 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="3cc52bdb500684c393fdd76d954079ce";
logging-data="1363137"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18jg4bCFpw9JNne342MGWLHwZ0kTXVNijM="
User-Agent: slrn/0.9.8.1 (VMS/Multinet)
Cancel-Lock: sha1:VS9ETfFbM0UAZhbR8pmD3y4aPJQ=
 by: Simon Clubley - Tue, 23 Jan 2024 13:13 UTC

On 2024-01-22, Dan Cross <cross@spitfire.i.gajendra.net> wrote:
> In article <uolqc2$o1rq$4@dont-email.me>,
> Simon Clubley <clubley@remove_me.eisner.decus.org-Earth.UFP> wrote:
>>On 2024-01-21, Lawrence D'Oliveiro <ldo@nz.invalid> wrote:
>>> On Sun, 21 Jan 2024 10:10 +0000 (GMT Standard Time), John Dallman wrote:
>>>
>>>> That's two quite hard
>>>> things, and starting on them now makes less sense than carrying on with
>>>> the current strategy, for good or ill.
>>>
>>> I think that?s called the ?sunk-cost fallacy?.
>>
>>So VSI's choices are to either continue selling x86-64 systems to customers
>>and complete the missing bits, or they stop selling systems for 3 years
>>while they write a migration tool from the ground up for something that
>>will never be as close in operation as the first option above.
>>
>>Hmmm, I wonder which option they will choose ? :-)
>>
>>Lawrence, you manage to make the current bunch of extreme zealots on both
>>sides of the political landscape in the US seem reasonable.
>
> I would suggest respectfully to stop feeding the troll. Or, as
> I suspect he's less a troll than just a crank, perhaps stop
> turning the crank.
>

I know Dan. I'm finally at the end of trying to reason with him, and
I have come to the same conclusion that others have, but I consider it
rude to just stop talking to someone without explaining why, which
I have now done. :-)

Simon.

--
Simon Clubley, clubley@remove_me.eisner.decus.org-Earth.UFP
Walking destinations on a map are further away than they appear.

Re: A few tools for improving software security

<uopf1k$1ffen$1@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33234&group=comp.os.vms#33234

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: davef@tsoft-inc.com (Dave Froble)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Tue, 23 Jan 2024 17:36:35 -0500
Organization: A noiseless patient Spider
Lines: 44
Message-ID: <uopf1k$1ffen$1@dont-email.me>
References: <uohthp$3t9gu$1@dont-email.me>
<memo.20240121101004.3116Y@jgd.cix.co.uk> <uok2o7$cgf7$6@dont-email.me>
<uolqc2$o1rq$4@dont-email.me> <uolr03$nal$1@reader1.panix.com>
<uooe1t$19j61$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Tue, 23 Jan 2024 22:36:36 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="60ff6f5de9af3a4ff6d680da8d154c9b";
logging-data="1555927"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18FvqEN7P6xWLk7N+jO421CxfnKLjgJVYU="
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:45.0) Gecko/20100101
Thunderbird/45.8.0
Cancel-Lock: sha1:kIcVN2E+/6Zx+GwU24UJFHlhqYg=
In-Reply-To: <uooe1t$19j61$1@dont-email.me>
 by: Dave Froble - Tue, 23 Jan 2024 22:36 UTC

On 1/23/2024 8:13 AM, Simon Clubley wrote:
> On 2024-01-22, Dan Cross <cross@spitfire.i.gajendra.net> wrote:
>> In article <uolqc2$o1rq$4@dont-email.me>,
>> Simon Clubley <clubley@remove_me.eisner.decus.org-Earth.UFP> wrote:
>>> On 2024-01-21, Lawrence D'Oliveiro <ldo@nz.invalid> wrote:
>>>> On Sun, 21 Jan 2024 10:10 +0000 (GMT Standard Time), John Dallman wrote:
>>>>
>>>>> That's two quite hard
>>>>> things, and starting on them now makes less sense than carrying on with
>>>>> the current strategy, for good or ill.
>>>>
>>>> I think that?s called the ?sunk-cost fallacy?.
>>>
>>> So VSI's choices are to either continue selling x86-64 systems to customers
>>> and complete the missing bits, or they stop selling systems for 3 years
>>> while they write a migration tool from the ground up for something that
>>> will never be as close in operation as the first option above.
>>>
>>> Hmmm, I wonder which option they will choose ? :-)
>>>
>>> Lawrence, you manage to make the current bunch of extreme zealots on both
>>> sides of the political landscape in the US seem reasonable.
>>
>> I would suggest respectfully to stop feeding the troll. Or, as
>> I suspect he's less a troll than just a crank, perhaps stop
>> turning the crank.
>>
>
> I know Dan. I'm finally at the end of trying to reason with him, and
> I have come to the same conclusion that others have, but I consider it
> rude to just stop talking to someone without explaining why, which
> I have now done. :-)
>
> Simon.
>

What is really rude is talking about Linux on c.o.v ...

--
David Froble Tel: 724-529-0450
Dave Froble Enterprises, Inc. E-Mail: davef@tsoft-inc.com
DFE Ultralights, Inc.
170 Grimplin Road
Vanderbilt, PA 15486

Re: A few tools for improving software security

<l1b6tvF6kbU1@mid.individual.net>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33236&group=comp.os.vms#33236

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!news.furie.org.uk!nntp.terraraq.uk!nntp-feed.chiark.greenend.org.uk!ewrotcd!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: bill.gunshannon@gmail.com (bill)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Tue, 23 Jan 2024 20:16:13 -0500
Lines: 50
Message-ID: <l1b6tvF6kbU1@mid.individual.net>
References: <uohthp$3t9gu$1@dont-email.me>
<memo.20240121101004.3116Y@jgd.cix.co.uk> <uok2o7$cgf7$6@dont-email.me>
<uolqc2$o1rq$4@dont-email.me> <uolr03$nal$1@reader1.panix.com>
<uooe1t$19j61$1@dont-email.me> <uopf1k$1ffen$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Trace: individual.net y++ldYiJ8H3xzl1fLDuMKgFTQVEMRqY/ElFSm4dzzWaxWEOKvg
Cancel-Lock: sha1:YqK+HsWbW60W6wxPtP1d+Jl7KgA= sha256:B83f0e2GjgDg3P8JdnmZRdk9jBiQKZb6jaSo2C5rLsU=
User-Agent: Mozilla Thunderbird
Content-Language: en-US
In-Reply-To: <uopf1k$1ffen$1@dont-email.me>
 by: bill - Wed, 24 Jan 2024 01:16 UTC

On 1/23/2024 5:36 PM, Dave Froble wrote:
> On 1/23/2024 8:13 AM, Simon Clubley wrote:
>> On 2024-01-22, Dan Cross <cross@spitfire.i.gajendra.net> wrote:
>>> In article <uolqc2$o1rq$4@dont-email.me>,
>>> Simon Clubley  <clubley@remove_me.eisner.decus.org-Earth.UFP> wrote:
>>>> On 2024-01-21, Lawrence D'Oliveiro <ldo@nz.invalid> wrote:
>>>>> On Sun, 21 Jan 2024 10:10 +0000 (GMT Standard Time), John Dallman
>>>>> wrote:
>>>>>
>>>>>> That's two quite hard
>>>>>> things, and starting on them now makes less sense than carrying on
>>>>>> with
>>>>>> the current strategy, for good or ill.
>>>>>
>>>>> I think that?s called the ?sunk-cost fallacy?.
>>>>
>>>> So VSI's choices are to either continue selling x86-64 systems to
>>>> customers
>>>> and complete the missing bits, or they stop selling systems for 3 years
>>>> while they write a migration tool from the ground up for something that
>>>> will never be as close in operation as the first option above.
>>>>
>>>> Hmmm, I wonder which option they will choose ? :-)
>>>>
>>>> Lawrence, you manage to make the current bunch of extreme zealots on
>>>> both
>>>> sides of the political landscape in the US seem reasonable.
>>>
>>> I would suggest respectfully to stop feeding the troll.  Or, as
>>> I suspect he's less a troll than just a crank, perhaps stop
>>> turning the crank.
>>>
>>
>> I know Dan. I'm finally at the end of trying to reason with him, and
>> I have come to the same conclusion that others have, but I consider it
>> rude to just stop talking to someone without explaining why, which
>> I have now done. :-)
>>
>> Simon.
>>
>
> What is really rude is talking about Linux on c.o.v ...
>

I don't know about rude, but even suggesting that the VMS kernel
(which now runs just fine on x86-64) should be replaced with a
Linux kernel has to be the stupidest idea I have ever seen here.

bill

Re: A few tools for improving software security

<uor2d8$1qhls$2@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33239&group=comp.os.vms#33239

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!news.hispagatos.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: clubley@remove_me.eisner.decus.org-Earth.UFP (Simon Clubley)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Wed, 24 Jan 2024 13:13:12 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 14
Message-ID: <uor2d8$1qhls$2@dont-email.me>
References: <uohthp$3t9gu$1@dont-email.me> <memo.20240121101004.3116Y@jgd.cix.co.uk> <uok2o7$cgf7$6@dont-email.me> <uolqc2$o1rq$4@dont-email.me> <uolr03$nal$1@reader1.panix.com> <uooe1t$19j61$1@dont-email.me> <uopf1k$1ffen$1@dont-email.me>
Injection-Date: Wed, 24 Jan 2024 13:13:12 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="828e1b0da5e836aa1de0181c916b0c4f";
logging-data="1918652"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/gkPVMBjUOhKhXLnBuNWd+eNxW9vZcFjs="
User-Agent: slrn/0.9.8.1 (VMS/Multinet)
Cancel-Lock: sha1:+LDDzarr4OLG8acb0Fz31/rWRZU=
 by: Simon Clubley - Wed, 24 Jan 2024 13:13 UTC

On 2024-01-23, Dave Froble <davef@tsoft-inc.com> wrote:
>
> What is really rude is talking about Linux on c.o.v ...
>

Unless you consider VMS to be perfect and not in need of any improvement,
other operating systems offer some good ideas that it would be nice to
see in VMS, especially around security and internal isolation in general.

Simon.

--
Simon Clubley, clubley@remove_me.eisner.decus.org-Earth.UFP
Walking destinations on a map are further away than they appear.

Re: A few tools for improving software security

<uos9ns$20quo$2@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33243&group=comp.os.vms#33243

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!rocksolid2!news.neodome.net!news.mixmin.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: davef@tsoft-inc.com (Dave Froble)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Wed, 24 Jan 2024 19:24:28 -0500
Organization: A noiseless patient Spider
Lines: 21
Message-ID: <uos9ns$20quo$2@dont-email.me>
References: <uohthp$3t9gu$1@dont-email.me>
<memo.20240121101004.3116Y@jgd.cix.co.uk> <uok2o7$cgf7$6@dont-email.me>
<uolqc2$o1rq$4@dont-email.me> <uolr03$nal$1@reader1.panix.com>
<uooe1t$19j61$1@dont-email.me> <uopf1k$1ffen$1@dont-email.me>
<uor2d8$1qhls$2@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Thu, 25 Jan 2024 00:24:28 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="0beafee1452888f0a1785c79d59974f0";
logging-data="2124760"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/1SOeOGXsfyFdSOmYLW6chqwa0pCpiqh8="
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:45.0) Gecko/20100101
Thunderbird/45.8.0
Cancel-Lock: sha1:/5HGl8J9XUaFQ0dbB5j9tSxJk6A=
In-Reply-To: <uor2d8$1qhls$2@dont-email.me>
 by: Dave Froble - Thu, 25 Jan 2024 00:24 UTC

On 1/24/2024 8:13 AM, Simon Clubley wrote:
> On 2024-01-23, Dave Froble <davef@tsoft-inc.com> wrote:
>>
>> What is really rude is talking about Linux on c.o.v ...
>>
>
> Unless you consider VMS to be perfect and not in need of any improvement,
> other operating systems offer some good ideas that it would be nice to
> see in VMS, especially around security and internal isolation in general.
>
> Simon.
>

Then discuss the ideas and concepts ...

--
David Froble Tel: 724-529-0450
Dave Froble Enterprises, Inc. E-Mail: davef@tsoft-inc.com
DFE Ultralights, Inc.
170 Grimplin Road
Vanderbilt, PA 15486

Re: A few tools for improving software security

<uos9mf$20quo$1@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33244&group=comp.os.vms#33244

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!news.1d4.us!usenet.goja.nl.eu.org!weretis.net!feeder8.news.weretis.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: davef@tsoft-inc.com (Dave Froble)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Wed, 24 Jan 2024 19:23:43 -0500
Organization: A noiseless patient Spider
Lines: 58
Message-ID: <uos9mf$20quo$1@dont-email.me>
References: <uohthp$3t9gu$1@dont-email.me>
<memo.20240121101004.3116Y@jgd.cix.co.uk> <uok2o7$cgf7$6@dont-email.me>
<uolqc2$o1rq$4@dont-email.me> <uolr03$nal$1@reader1.panix.com>
<uooe1t$19j61$1@dont-email.me> <uopf1k$1ffen$1@dont-email.me>
<l1b6tvF6kbU1@mid.individual.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Thu, 25 Jan 2024 00:23:43 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="0beafee1452888f0a1785c79d59974f0";
logging-data="2124760"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19WuP3Esv28iT9N8T8MyUTkg7MbQ2/3jHM="
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:45.0) Gecko/20100101
Thunderbird/45.8.0
Cancel-Lock: sha1:nzlM95ltJYejTu0+tcpLY7wZs40=
In-Reply-To: <l1b6tvF6kbU1@mid.individual.net>
 by: Dave Froble - Thu, 25 Jan 2024 00:23 UTC

On 1/23/2024 8:16 PM, bill wrote:
> On 1/23/2024 5:36 PM, Dave Froble wrote:
>> On 1/23/2024 8:13 AM, Simon Clubley wrote:
>>> On 2024-01-22, Dan Cross <cross@spitfire.i.gajendra.net> wrote:
>>>> In article <uolqc2$o1rq$4@dont-email.me>,
>>>> Simon Clubley <clubley@remove_me.eisner.decus.org-Earth.UFP> wrote:
>>>>> On 2024-01-21, Lawrence D'Oliveiro <ldo@nz.invalid> wrote:
>>>>>> On Sun, 21 Jan 2024 10:10 +0000 (GMT Standard Time), John Dallman wrote:
>>>>>>
>>>>>>> That's two quite hard
>>>>>>> things, and starting on them now makes less sense than carrying on with
>>>>>>> the current strategy, for good or ill.
>>>>>>
>>>>>> I think that?s called the ?sunk-cost fallacy?.
>>>>>
>>>>> So VSI's choices are to either continue selling x86-64 systems to customers
>>>>> and complete the missing bits, or they stop selling systems for 3 years
>>>>> while they write a migration tool from the ground up for something that
>>>>> will never be as close in operation as the first option above.
>>>>>
>>>>> Hmmm, I wonder which option they will choose ? :-)
>>>>>
>>>>> Lawrence, you manage to make the current bunch of extreme zealots on both
>>>>> sides of the political landscape in the US seem reasonable.
>>>>
>>>> I would suggest respectfully to stop feeding the troll. Or, as
>>>> I suspect he's less a troll than just a crank, perhaps stop
>>>> turning the crank.
>>>>
>>>
>>> I know Dan. I'm finally at the end of trying to reason with him, and
>>> I have come to the same conclusion that others have, but I consider it
>>> rude to just stop talking to someone without explaining why, which
>>> I have now done. :-)
>>>
>>> Simon.
>>>
>>
>> What is really rude is talking about Linux on c.o.v ...
>>
>
> I don't know about rude, but even suggesting that the VMS kernel
> (which now runs just fine on x86-64) should be replaced with a
> Linux kernel has to be the stupidest idea I have ever seen here.
>
> bill
>

I don't know Bill, some pretty stupid things have graced c.o.v at times.

:-)

--
David Froble Tel: 724-529-0450
Dave Froble Enterprises, Inc. E-Mail: davef@tsoft-inc.com
DFE Ultralights, Inc.
170 Grimplin Road
Vanderbilt, PA 15486

Re: A few tools for improving software security

<up18bn$313qt$6@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33275&group=comp.os.vms#33275

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: ldo@nz.invalid (Lawrence D'Oliveiro)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Fri, 26 Jan 2024 21:31:35 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 29
Message-ID: <up18bn$313qt$6@dont-email.me>
References: <memo.20240119214658.3116S@jgd.cix.co.uk>
<uof4t2$3c1i2$1@dont-email.me> <memo.20240120081044.3116T@jgd.cix.co.uk>
<uogs7c$3o3e0$2@dont-email.me> <memo.20240120165643.3116X@jgd.cix.co.uk>
<uohthp$3t9gu$1@dont-email.me> <memo.20240121101004.3116Y@jgd.cix.co.uk>
<uok2o7$cgf7$6@dont-email.me> <uolqc2$o1rq$4@dont-email.me>
<uome7d$ruup$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 26 Jan 2024 21:31:35 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="e3e30b5c11bd53f646c3b65395233311";
logging-data="3182429"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18l14wJ3j+Yc9b/s4sbLwAo"
User-Agent: Pan/0.155 (Kherson; fc5a80b8)
Cancel-Lock: sha1:7/6F1GA4oZggOMBkNkigAMsvUV8=
 by: Lawrence D'Oliv - Fri, 26 Jan 2024 21:31 UTC

On Mon, 22 Jan 2024 14:04:13 -0500, Stephen Hoffman wrote:

> Not gonna happen. Not until well after VSI is a whole lot bigger and a
> whole lot better funded, and is encountering some hard limits in their
> chosen hardware platform and tooling.

You tell me: either it is too late, or it’s not. If it is, then VMS is
already essentially circling the plughole.

> And I still haven't heard a sales pitch for which kernel to pick, as
> Linux is but one of many fine choices. And GPL'd Linux quite possibly
> not the best choice for grafting a closed-source commercial platform.

Businesses like to take, but not give back, don’t they?

Many have criticized the GPL on this basis, but one thing it has helped to
ensure is a level playing field. That’s why so many businesses have
adopted GPL’d software, regardless of their earlier carping--because their
competitors had done so, and they didn’t want to be left behind.

Compare the BSDs: there have been several startups over the years that
took the BSD code and made it proprietary, because the licence allows you
to do that. Most startups fail, as you may know. When those startups
failed, their proprietary code died with them. And so the BSD ecosystem
lost yet another bit of its lifeblood.

But when startups build their product on GPL’d code, then if/when they
die, their code lives on, perhaps to fertilize the soil where another
startup can grow.

Re: A few tools for improving software security

<up18cv$313qt$7@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33277&group=comp.os.vms#33277

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!news.chmurka.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: ldo@nz.invalid (Lawrence D'Oliveiro)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Fri, 26 Jan 2024 21:32:16 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 8
Message-ID: <up18cv$313qt$7@dont-email.me>
References: <uohthp$3t9gu$1@dont-email.me>
<memo.20240121101004.3116Y@jgd.cix.co.uk> <uok2o7$cgf7$6@dont-email.me>
<uolqc2$o1rq$4@dont-email.me> <uolr03$nal$1@reader1.panix.com>
<uooe1t$19j61$1@dont-email.me> <uopf1k$1ffen$1@dont-email.me>
<l1b6tvF6kbU1@mid.individual.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 26 Jan 2024 21:32:16 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="e3e30b5c11bd53f646c3b65395233311";
logging-data="3182429"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+snn4rAph1GviKW8Z2rdIf"
User-Agent: Pan/0.155 (Kherson; fc5a80b8)
Cancel-Lock: sha1:9XbvJVQDDVeEwMOO9GGcwsTGYsA=
 by: Lawrence D'Oliv - Fri, 26 Jan 2024 21:32 UTC

On Tue, 23 Jan 2024 20:16:13 -0500, bill wrote:

> I don't know about rude, but even suggesting that the VMS kernel (which
> now runs just fine on x86-64) should be replaced with a Linux kernel has
> to be the stupidest idea I have ever seen here.

Gosh, now there’s an insightful argument I haven’t yet come across in this
discussion ...

Re: A few tools for improving software security

<up24nu$392m2$2@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33281&group=comp.os.vms#33281

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: davef@tsoft-inc.com (Dave Froble)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Sat, 27 Jan 2024 00:36:11 -0500
Organization: A noiseless patient Spider
Lines: 41
Message-ID: <up24nu$392m2$2@dont-email.me>
References: <memo.20240119214658.3116S@jgd.cix.co.uk>
<uof4t2$3c1i2$1@dont-email.me> <memo.20240120081044.3116T@jgd.cix.co.uk>
<uogs7c$3o3e0$2@dont-email.me> <memo.20240120165643.3116X@jgd.cix.co.uk>
<uohthp$3t9gu$1@dont-email.me> <memo.20240121101004.3116Y@jgd.cix.co.uk>
<uok2o7$cgf7$6@dont-email.me> <uolqc2$o1rq$4@dont-email.me>
<uome7d$ruup$1@dont-email.me> <up18bn$313qt$6@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Sat, 27 Jan 2024 05:35:58 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="183d24a5b5dd3809fc48f5ad3ccde33b";
logging-data="3443394"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/OrgEjSl5YcyLFn0VntyKrm86+WsMghRA="
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:45.0) Gecko/20100101
Thunderbird/45.8.0
Cancel-Lock: sha1:4XVTTOepn5JENAC/hdEZOQgwUy8=
In-Reply-To: <up18bn$313qt$6@dont-email.me>
 by: Dave Froble - Sat, 27 Jan 2024 05:36 UTC

On 1/26/2024 4:31 PM, Lawrence D'Oliveiro wrote:
> On Mon, 22 Jan 2024 14:04:13 -0500, Stephen Hoffman wrote:
>
>> Not gonna happen. Not until well after VSI is a whole lot bigger and a
>> whole lot better funded, and is encountering some hard limits in their
>> chosen hardware platform and tooling.
>
> You tell me: either it is too late, or it’s not. If it is, then VMS is
> already essentially circling the plughole.
>
>> And I still haven't heard a sales pitch for which kernel to pick, as
>> Linux is but one of many fine choices. And GPL'd Linux quite possibly
>> not the best choice for grafting a closed-source commercial platform.
>
> Businesses like to take, but not give back, don’t they?
>
> Many have criticized the GPL on this basis, but one thing it has helped to
> ensure is a level playing field. That’s why so many businesses have
> adopted GPL’d software, regardless of their earlier carping--because their
> competitors had done so, and they didn’t want to be left behind.
>
> Compare the BSDs: there have been several startups over the years that
> took the BSD code and made it proprietary, because the licence allows you
> to do that. Most startups fail, as you may know. When those startups
> failed, their proprietary code died with them. And so the BSD ecosystem
> lost yet another bit of its lifeblood.
>
> But when startups build their product on GPL’d code, then if/when they
> die, their code lives on, perhaps to fertilize the soil where another
> startup can grow.
>

This reminds me of something. Anybody remember the Sun employee that used to
come here and harass us? Andrew something maybe?

--
David Froble Tel: 724-529-0450
Dave Froble Enterprises, Inc. E-Mail: davef@tsoft-inc.com
DFE Ultralights, Inc.
170 Grimplin Road
Vanderbilt, PA 15486

Re: A few tools for improving software security

<up31bq$3d7cp$1@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33284&group=comp.os.vms#33284

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!news.swapon.de!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: arne@vajhoej.dk (Arne Vajhøj)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Sat, 27 Jan 2024 08:44:26 -0500
Organization: A noiseless patient Spider
Lines: 9
Message-ID: <up31bq$3d7cp$1@dont-email.me>
References: <memo.20240119214658.3116S@jgd.cix.co.uk>
<uof4t2$3c1i2$1@dont-email.me> <memo.20240120081044.3116T@jgd.cix.co.uk>
<uogs7c$3o3e0$2@dont-email.me> <memo.20240120165643.3116X@jgd.cix.co.uk>
<uohthp$3t9gu$1@dont-email.me> <memo.20240121101004.3116Y@jgd.cix.co.uk>
<uok2o7$cgf7$6@dont-email.me> <uolqc2$o1rq$4@dont-email.me>
<uome7d$ruup$1@dont-email.me> <up18bn$313qt$6@dont-email.me>
<up24nu$392m2$2@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Sat, 27 Jan 2024 13:44:26 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="2b68a317599876190a45da351c54cf70";
logging-data="3579289"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+OWO86HXhPXLouvhMFdLUZGgTDe6dLxv4="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:15oisKoyiDgEVf7DH6ADjNBC3I0=
Content-Language: en-US
In-Reply-To: <up24nu$392m2$2@dont-email.me>
 by: Arne Vajhøj - Sat, 27 Jan 2024 13:44 UTC

On 1/27/2024 12:36 AM, Dave Froble wrote:
> This reminds me of something.  Anybody remember the Sun employee that
> used to come here and harass us?  Andrew something maybe?

Andrew Harrison

Arne

Re: A few tools for improving software security

<up3dc9$3f7b4$1@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33286&group=comp.os.vms#33286

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!news.niel.me!news.gegeweb.eu!gegeweb.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: davef@tsoft-inc.com (Dave Froble)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Sat, 27 Jan 2024 12:09:46 -0500
Organization: A noiseless patient Spider
Lines: 19
Message-ID: <up3dc9$3f7b4$1@dont-email.me>
References: <memo.20240119214658.3116S@jgd.cix.co.uk>
<uof4t2$3c1i2$1@dont-email.me> <memo.20240120081044.3116T@jgd.cix.co.uk>
<uogs7c$3o3e0$2@dont-email.me> <memo.20240120165643.3116X@jgd.cix.co.uk>
<uohthp$3t9gu$1@dont-email.me> <memo.20240121101004.3116Y@jgd.cix.co.uk>
<uok2o7$cgf7$6@dont-email.me> <uolqc2$o1rq$4@dont-email.me>
<uome7d$ruup$1@dont-email.me> <up18bn$313qt$6@dont-email.me>
<up24nu$392m2$2@dont-email.me> <up31bq$3d7cp$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Sat, 27 Jan 2024 17:09:29 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="183d24a5b5dd3809fc48f5ad3ccde33b";
logging-data="3644772"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+NSZqtk9o0k3iKRyYyTZGviP1x8h1GNa4="
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:45.0) Gecko/20100101
Thunderbird/45.8.0
Cancel-Lock: sha1:qZU3JOoGBhVYXjIIN0NgINFPkO0=
In-Reply-To: <up31bq$3d7cp$1@dont-email.me>
 by: Dave Froble - Sat, 27 Jan 2024 17:09 UTC

On 1/27/2024 8:44 AM, Arne Vajhøj wrote:
> On 1/27/2024 12:36 AM, Dave Froble wrote:
>> This reminds me of something. Anybody remember the Sun employee that used to
>> come here and harass us? Andrew something maybe?
>
> Andrew Harrison
>
> Arne
>
>

You think maybe he changed his name?

--
David Froble Tel: 724-529-0450
Dave Froble Enterprises, Inc. E-Mail: davef@tsoft-inc.com
DFE Ultralights, Inc.
170 Grimplin Road
Vanderbilt, PA 15486

Re: A few tools for improving software security

<up3ltv$c4l$1@reader1.panix.com>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33292&group=comp.os.vms#33292

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!panix!.POSTED.spitfire.i.gajendra.net!not-for-mail
From: cross@spitfire.i.gajendra.net (Dan Cross)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Sat, 27 Jan 2024 19:35:27 -0000 (UTC)
Organization: PANIX Public Access Internet and UNIX, NYC
Message-ID: <up3ltv$c4l$1@reader1.panix.com>
References: <memo.20240119214658.3116S@jgd.cix.co.uk> <up24nu$392m2$2@dont-email.me> <up31bq$3d7cp$1@dont-email.me> <up3dc9$3f7b4$1@dont-email.me>
Injection-Date: Sat, 27 Jan 2024 19:35:27 -0000 (UTC)
Injection-Info: reader1.panix.com; posting-host="spitfire.i.gajendra.net:166.84.136.80";
logging-data="12437"; mail-complaints-to="abuse@panix.com"
X-Newsreader: trn 4.0-test77 (Sep 1, 2010)
Originator: cross@spitfire.i.gajendra.net (Dan Cross)
 by: Dan Cross - Sat, 27 Jan 2024 19:35 UTC

In article <up3dc9$3f7b4$1@dont-email.me>,
Dave Froble <davef@tsoft-inc.com> wrote:
>On 1/27/2024 8:44 AM, Arne Vajhøj wrote:
>> On 1/27/2024 12:36 AM, Dave Froble wrote:
>>> This reminds me of something. Anybody remember the Sun employee that used to
>>> come here and harass us? Andrew something maybe?
>>
>> Andrew Harrison
>
>You think maybe he changed his name?

I doubt the current troll could have gotten a job at Sun.

- Dan C.

Re: A few tools for improving software security

<up3q2r$ma1$1@reader1.panix.com>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33302&group=comp.os.vms#33302

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!eternal-september.org!feeder3.eternal-september.org!2.eu.feeder.erje.net!3.us.feeder.erje.net!feeder.erje.net!weretis.net!feeder6.news.weretis.net!panix!.POSTED.spitfire.i.gajendra.net!not-for-mail
From: cross@spitfire.i.gajendra.net (Dan Cross)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Sat, 27 Jan 2024 20:46:19 -0000 (UTC)
Organization: PANIX Public Access Internet and UNIX, NYC
Message-ID: <up3q2r$ma1$1@reader1.panix.com>
References: <up3ltv$c4l$1@reader1.panix.com> <memo.20240127202907.3116s@jgd.cix.co.uk>
Injection-Date: Sat, 27 Jan 2024 20:46:19 -0000 (UTC)
Injection-Info: reader1.panix.com; posting-host="spitfire.i.gajendra.net:166.84.136.80";
logging-data="22849"; mail-complaints-to="abuse@panix.com"
X-Newsreader: trn 4.0-test77 (Sep 1, 2010)
Originator: cross@spitfire.i.gajendra.net (Dan Cross)
 by: Dan Cross - Sat, 27 Jan 2024 20:46 UTC

In article <memo.20240127202907.3116s@jgd.cix.co.uk>,
John Dallman <jgd@cix.co.uk> wrote:
>In article <up3ltv$c4l$1@reader1.panix.com>,
>cross@spitfire.i.gajendra.net (Dan Cross) wrote:
>> In article <up3dc9$3f7b4$1@dont-email.me>,
>> Dave Froble <davef@tsoft-inc.com> wrote:
>> >You think maybe he changed his name?
>> I doubt the current troll could have gotten a job at Sun.
>
>I met some remarkably useless Sun marketing managers.

Yeah well.... It's tell that the current troll couldn't have
even gotten a job where it was possible to trip over the hiring
bar.

- Dan C.

Re: A few tools for improving software security

<up43sm$3iu19$2@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33306&group=comp.os.vms#33306

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: davef@tsoft-inc.com (Dave Froble)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Sat, 27 Jan 2024 18:33:59 -0500
Organization: A noiseless patient Spider
Lines: 25
Message-ID: <up43sm$3iu19$2@dont-email.me>
References: <memo.20240119214658.3116S@jgd.cix.co.uk>
<up24nu$392m2$2@dont-email.me> <up31bq$3d7cp$1@dont-email.me>
<up3dc9$3f7b4$1@dont-email.me> <up3ltv$c4l$1@reader1.panix.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Sat, 27 Jan 2024 23:33:42 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="8107a54a7e34ce33e13f13476cb7a45d";
logging-data="3766313"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+6VdwIXZ7HcH5+VAtQylWH/CBTCyfHW9E="
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:45.0) Gecko/20100101
Thunderbird/45.8.0
Cancel-Lock: sha1:TN/w9wgmNP/mv0zntp6dDRuH8vg=
In-Reply-To: <up3ltv$c4l$1@reader1.panix.com>
 by: Dave Froble - Sat, 27 Jan 2024 23:33 UTC

On 1/27/2024 2:35 PM, Dan Cross wrote:
> In article <up3dc9$3f7b4$1@dont-email.me>,
> Dave Froble <davef@tsoft-inc.com> wrote:
>> On 1/27/2024 8:44 AM, Arne Vajhøj wrote:
>>> On 1/27/2024 12:36 AM, Dave Froble wrote:
>>>> This reminds me of something. Anybody remember the Sun employee that used to
>>>> come here and harass us? Andrew something maybe?
>>>
>>> Andrew Harrison
>>
>> You think maybe he changed his name?
>
> I doubt the current troll could have gotten a job at Sun.
>
> - Dan C.
>

Well, if the job was to be a troll .....

--
David Froble Tel: 724-529-0450
Dave Froble Enterprises, Inc. E-Mail: davef@tsoft-inc.com
DFE Ultralights, Inc.
170 Grimplin Road
Vanderbilt, PA 15486

Re: A few tools for improving software security

<l1lpqfF9a1pU4@mid.individual.net>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=33311&group=comp.os.vms#33311

  copy link   Newsgroups: comp.os.vms
Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: bill.gunshannon@gmail.com (bill)
Newsgroups: comp.os.vms
Subject: Re: A few tools for improving software security
Date: Sat, 27 Jan 2024 20:43:35 -0500
Lines: 16
Message-ID: <l1lpqfF9a1pU4@mid.individual.net>
References: <up3ltv$c4l$1@reader1.panix.com>
<memo.20240127202907.3116s@jgd.cix.co.uk>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net JYEx6Lrm1qAq0+L/IPNPQgwp6MyVb0sidNTjNEHpfRWvvEn+kF
Cancel-Lock: sha1:1JIBuhzi8jI+Yv5Tyw0orW7O76I= sha256:5Sz5MZE6FibMM+pBEq7oPTZqnbDPpI1AhhkaXgWObMI=
User-Agent: Mozilla Thunderbird
Content-Language: en-US
In-Reply-To: <memo.20240127202907.3116s@jgd.cix.co.uk>
 by: bill - Sun, 28 Jan 2024 01:43 UTC

On 1/27/2024 3:29 PM, John Dallman wrote:
> In article <up3ltv$c4l$1@reader1.panix.com>,
> cross@spitfire.i.gajendra.net (Dan Cross) wrote:
>> In article <up3dc9$3f7b4$1@dont-email.me>,
>> Dave Froble <davef@tsoft-inc.com> wrote:
>>> You think maybe he changed his name?
>> I doubt the current troll could have gotten a job at Sun.
>
> I met some remarkably useless Sun marketing managers.
>

Back around 1990 HP's had them beat when it came to useless.

bill

Pages:12
server_pubkey.txt

rocksolid light 0.9.81
clearnet tor