Re: [Sks-devel] Withdrawal of Service - keys.flanga.io

[Mike]

So you are angry that i and a few others have reported several bugs, to a 
system that we would like to see continue to exist?

It isn't an attack its a proof of concept to show that malicious people could 
do damage, this is to get a point across to prove there's an issue in hope 
someone fixes it as it has been ignored for years, im not the only one to write 
a proof of concept for the same issue. Yegor wrote a very very effect PoC and 
was ignored as well when he submitted the bug.

Should i or others not submit bugs that could be detrimental to the functioning 
of the network to get fixed, because this approach is very off putting. I guess 
people might think twice about reporting a bug to you!

And the PoC i wrote is pretty simple, in fact it can be made far more simple 
and dangerous, with little effort from someone with real coding skills!

And i have previously pointed out alternate solutions in a previous article, 
for example Keybase.io, i am not a fan but its certainly proving to be a way 
better option at the moment, and people are using it instead of the keyservers, 
or storing the keys on github or their website. 

If there is no dev team, then maybe its time to call it a day instead of 
pretending everything is ok?


On Thu, 15 Nov 2018 18:12:14 -0700
Ryan Hunt <address@hidden> wrote:

> Wait, you have the skillset to code attacks and spew articles yet, no 
> capability for solutions? Smells like ignorance is your forte.
> 
> You seem to be under the impression that SKS has active developers working on 
> it, the reason the “dev team” is quiet as per your “articles” is there is no 
> friggin dev team, just some maintainers pushing merge requests from people 
> hacking it a bit here and there to fix major problems that can be fixed and 
> keep it compiling on modern systems.
> 
> There is nobody actively interested in the development required to 
> re-archectect the SKS backend and infrastructure that had been running fine 
> for a few decades now.. until you came along and made a big stink.. If you 
> have a proposal for a new way of doing things, we’re all dying to hear it.
> 
> -Ryan
> 
> 
> > On Nov 15, 2018, at 6:01 PM, Mike <address@hidden> wrote:
> > 
> > If i had the skill set needed to submit patches i would, but i don't.
> > But i do have a voice and that can be used to spur on change.
> > 
> > I wrote the articles because there is a clear ignorance here that your 
> > displaying really well, which is preventing things from getting fixed. Your 
> > clearly angry and not interested in resolving this issue through 
> > discussion. That ignorance is going to harm admins as Moritz Wirth and 
> > Fabian points out.
> > 
> > Can you say there's no risk to admins financially and legally, because of 
> > the poor design of the servers or do they work just fine and they have 
> > nothing to worry about?
> > 
> > If performing as designed means: 
> > failing to deal with oversized keys and chewing up bandwidth and CPU cycles 
> > and causing servers to stop responding or the web interface to freeze or 
> > spit out garbage is a feature then ok.
> > or network instability then ok.
> > 
> > Mike :)
> > 
> > and if calling people children and being generally insulting is your thing 
> > your not really being constructive with this!
> > 
> > 
> > On Fri, 16 Nov 2018 08:45:06 +0800
> > Matthew Walster <address@hidden <mailto:address@hidden>> wrote:
> > 
> >> On Fri, 16 Nov 2018, 08:36 Mike <address@hidden wrote:
> >> 
> >>> Your welcome to blame others for the servers issues.
> >>> 
> >>> I and others have pointed out many times over the issues and no one has
> >>> fixed them.
> >>> Rather than blame me, take responsibility for the servers failings, for
> >>> the developers failings.
> >>> 
> >> 
> >> You are more than welcome to submit patches (or even ideas for patches) if
> >> you want to help improve things. Screaming blue murder helps no-one.
> >> 
> >> Decent and good developers take bugs and fix them and ensure the ongoing
> >>> survival of their software, not blame them on the people who found them 
> >>> and
> >>> exposed them!
> >>> 
> >> 
> >> The software is not broken. It is performing as designed. The same
> >> side-effects are present in Bitcoin but I don't see you making deranged
> >> comments about that...
> >> 
> >> Your basicly saying we should be able to have weak software and bad people
> >>> shouldnt do bad things, thats not how the world works. Take some
> >>> responsibility!!!
> >>> 
> >> 
> >> That's not what anyone is saying. What are you, 12 years old?
> >> 
> >> And im not a journalist!
> >>> 
> >> 
> >> You wrote an article.
> >> 
> >> M
> >> 
> >>> 
> > 
> > 
> > -- 
> > me <address@hidden <mailto:address@hidden>>
> > 
> > _______________________________________________
> > Sks-devel mailing list
> > address@hidden <mailto:address@hidden>
> > https://lists.nongnu.org/mailman/listinfo/sks-devel 
> > <https://lists.nongnu.org/mailman/listinfo/sks-devel>


-- 
me <address@hidden>