linux-kernel - Re: [PATCH] Stop scaring users with "treason uncloaked!"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <1229644234.3726.577.camel@calx>
Date:	Thu, 18 Dec 2008 17:50:34 -0600
From:	Matt Mackall <mpm@...enic.com>
To:	Ilpo Järvinen <ilpo.jarvinen@...sinki.fi>
Cc:	David Miller <davem@...emloft.net>,
	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
	netdev <netdev@...r.kernel.org>
Subject: Re: [PATCH] Stop scaring users with "treason uncloaked!"

On Fri, 2008-12-19 at 00:33 +0200, Ilpo Järvinen wrote:
> On Thu, 18 Dec 2008, Matt Mackall wrote:
> 
> > These debug messages are uninformative and extremely alarming. Rather
> > than reporting a peer as a treacherous attacker, report it more
> > correctly as simply broken. 
> 
> Last time (well, ignoring some report on ancient vendor kernel) I've seen 
> this to trigger it wasn't the fault of the peer but ours (we sent past the 
> advertized window and window ended up being shrunk to zero). I agree that 
> the message as-is is not very good but your change is not very good 
> either.

Here this is the bulk of messages on my server (which is otherwise
fairly quiet).

It really doesn't matter whether the message is technically accurate -
it's mostly there for the benefit of kernel hackers. The average end
user is not going to have the slightest clue what is going on nor should
they even care. An advanced network admin might be able to figure things
out by poking at packet traces, but again: not much reason to care. For
most admins, the vast majority of these treasonous peers won't be under
their administrative control. 

If you want, we can instead say "Peer %d unexpectedly shrunk window...".
So long as the scary bit is gone, I don't care.

-- 
Mathematics is the supreme nostalgia of our time.

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/