Snapshot of -stable

[Ben Goren <ben@trumpetpower.com>]

Last year, I started a  thread about official snapshots of -stable
instead of -current:

    http://www.monkey.org/openbsd/archive/misc/0108/msg00267.html

The end result  was that there isn't official time  or interest in
producing  such snapthots. I'd  be welcome  to create  and publish
them, myself, but there's the question of trust....

Considering  the  number  of  critical holes  in  this  particular
release,  I'd like  to suggest  a one-time  official exception. It
would be really  nice to see an official snapshot  of -stable with
the fixed SSH, Apache, resolver,  etc. Perhaps it could be labeled
3.1.1 and made the official current (not -current) version.

I'm in the process of  building a release of -stable, myself. I'll
be happy to publish it, but  who's going to trust me? I'm also not
sure my ADSL could survive if it became especially popular.

Before the SSH hole, you could connect  a bare box to the 'Net, do
an FTP install, and not have to worry about getting 0wn3d a minute
after the first  boot.  Now, granted, you can  boot to single-user
the  first time  to enable  privelege separation  or disable  SSH,
but....

I'd be happy to help with this, but I'm lacking the most important
element: a  years-long history of  trust. Only The Powers  That Be
have that.

b&

--
Ben Goren
 mailto:ben@trumpetpower.com
 http://www.trumpetpower.com/
 icbm:33o25'37"N_111o57'32"W

[demime 0.98d removed an attachment of type application/pgp-signature]