Jacob Appelbaum

On 9/16/15, Mikkel Krautz [email protected] wrote: > If you're running a git master server, 1.2.9+ clients that run our patched > Qt (our binary clients on Windows, OS X), as...

Odd, I see a server password field as long as a I use a valid hostname (which is then automatically resolved). This actually reveals a more subtle bug: mumble attempts...

I think that when using a SOCKS5 proxy mumble should not attempt any DNS resolution at all.

Yes, that would be welcomed. I've reviewed a number of CrOS patches and every one of them seemed worth landing. Please open pull requests, I'll review and merge as appropriate....

On 8/21/18, Mike Frysinger wrote: > i was thinking you'd add a few of us (security minded peeps) as Members and > then we'd be able to review/merge changes directly...

On 11/4/18, Agostino Sarubbo wrote: > I just want to let you know that since there is no activity, the package was > masked and will be removed on the...

How does this impact other OS X builds? Could you please report on any other impacted platforms as well?

I'd like to see what @h01ger thinks of these changes?

tlsdated seems to do it properly. tlsdate and tlsdate-helper when run independently are not yet hardened.

This will likely land in 0.0.12 - quick and dirty efforts to sandbox tlsdate and tlsdate-helper resulted in tlsdated ceasing to function properly. As it stands, I want to ensure...