21–30 of 48 posts
>What follows is, before anything else, a story. One of those old, well-worn ones. Gag.
[flagged]
These people write like they picture themselves as sages describing the end times to scared children.
Earlier quoted context omitted.
[flagged]
Nah I’m just sick of the melodramatic style of writing that seems to pervade all of the major tech blogs and companies now. These people write like they picture themselves as sages describing the end times to scared children.
You complain about their writing style, no one forced you to read, which you could summarize with an AI if you even cared for the conent but no.
And i read A LOT and i do not come across this writing style at all.
Earlier quoted context omitted.
[flagged]
Nah I’m just sick of the melodramatic style of writing that seems to pervade all of the major tech blogs and companies now. These people write like they picture themselves as sages describing the end times to scared children.
Earlier quoted context omitted.
Nah I’m just sick of the melodramatic style of writing that seems to pervade all of the major tech blogs and companies now. These people write like they picture themselves as sages describing the end times to scared children.
And? then keep it for yourself. Why do i have to read your ignorant comment? You complain about their writing style, no one forced you to read, which you could summarize with an AI if you even cared for the conent but no. And i read A LOT and i do not come across this writing style at all.
Nah.
Earlier quoted context omitted.
Many years ago I used Exim because it was default for my distro of choice back then. But after a few emergency patchings caused by yet another RCE in Exim I learned that switching to Postfix massively improved my sleep quality.
There's a weird folk belief that Exim is a secure 2nd-generation MTA, but it's not; it's a 1st generation MTA, like Sendmail and Smail. The two "secure" 2nd generation MTAs are Postfix and qmail. You shouldn't use those either, really; there is no reason to run a memory-unsafe MTA, or, for that matter, an MTA that isn't backed by a real database.
Earlier quoted context omitted.
The Calif people found a nice bug in a qmail fork(what I consider usable qmail) some weeks ago.
Right, and that fork is the only version of qmail people still run, and the bug they found was extremely funny given Bernstein's original qmail design (it was, if I remember right, a popen(3) vulnerability --- something that never would have showed up in Bernstein's code, but that's what happens when code gets abandoned, it gets picked up by people who don't really understand it). But it's hard to charge that vulnera…
However it has some compatibility problems with modern practices, the most significant being that it does not know TLS.
Having to use TLS is the main reason for running a qmail fork instead of the original.
Earlier quoted context omitted.
Nah I’m just sick of the melodramatic style of writing that seems to pervade all of the major tech blogs and companies now. These people write like they picture themselves as sages describing the end times to scared children.
And? then keep it for yourself. Why do i have to read your ignorant comment? You complain about their writing style, no one forced you to read, which you could summarize with an AI if you even cared for the conent but no. And i read A LOT and i do not come across this writing style at all.
Previously (2023): https://www.bleepingcomputer.com/news/security/millions-of-e... Previously (2020): https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE... Previously (2019): https://www.cvedetails.com/vulnerability-list/vendor_id-1091...
Earlier quoted context omitted.
Right, and that fork is the only version of qmail people still run, and the bug they found was extremely funny given Bernstein's original qmail design (it was, if I remember right, a popen(3) vulnerability --- something that never would have showed up in Bernstein's code, but that's what happens when code gets abandoned, it gets picked up by people who don't really understand it). But it's hard to charge that vulnera…
Actually the original qmail still works fine. However it has some compatibility problems with modern practices, the most significant being that it does not know TLS. Having to use TLS is the main reason for running a qmail fork instead of the original.
2025-05-01 - Vulnerability submitted to security@exim.org
2026-05-08 - Exim maintainers notified the Distros
2026-05-10 - Restricted Access is provided for Distros
2026-05-12 - Public release and Coordinated distro Release
"I should retrain. Something with wood." is the appropriate German idiom for this, I guess.