OSNews

Please provide an exploit for talkd.

"That's where you would be wrong. In version 2.8 and earlier, it was enabled by default"

is != was.
And unless you can provide a proof of concept talkd exploit or prove that it's actually remotely exploitable the claim, for what it's worth, isnt invalid.

http://www.killsometime.com/video/video.asp?ID=327

http://video.google.com/videoplay?docid=-7153152098207965240

"Having a hole that could, some time in the past, have been exploited doesn't count as a remote hole."

Of course it does, otherwise you can discount ever remote hole that has ever been fixed.

"You have to have a workable exploit on the current version (at the time)."

Why must the exploit have to be created at the time the vulnerability was first discovered? That makes no sense. A remote hole is a remote hole regardless of whether or not it's been exploited.

I'm sure that there still are lots of potential holes in the current distribution but the point is, they're so hard to find that nobody knows where they are or how to exploit them.

"if you find a hole in a daemon that has been disabled in the current version it doesn't count (or did they find that hole before 2.8 came out?)."

You don't understand, when the vulnerability was discovered in 2000, talkd was enabled by default. The OpenBSD team disabled talkd by default BECAUSE OF the discovery of the vulnerability.

"is != was. "

At the time when the vulnerability was discovered, talkd was enabled by default, so you can't discount it.

"And unless you can provide a proof of concept talkd exploit or prove that it's actually remotely exploitable the claim, for what it's worth, isnt invalid."

That makes no sense, why should the burden of proof be on me? No one has proven that it's NOT exploitable, so following your logic, I could conclude that it MUST be exploitable.