From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:53881) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1eLmKG-0008F5-73 for guix-patches@gnu.org; Mon, 04 Dec 2017 03:42:09 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1eLmKB-0002kW-CT for guix-patches@gnu.org; Mon, 04 Dec 2017 03:42:08 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:35580) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1eLmKB-0002jy-8K for guix-patches@gnu.org; Mon, 04 Dec 2017 03:42:03 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1eLmKA-0006kp-Nv for guix-patches@gnu.org; Mon, 04 Dec 2017 03:42:02 -0500 Subject: [bug#29528] Add blacknurse Resent-Message-ID: From: ludo@gnu.org (Ludovic =?UTF-8?Q?Court=C3=A8s?=) References: <20171130194227.bpe4l2ccvcrr5spb@abyayala> <874lp74dtz.fsf@elephly.net> Date: Mon, 04 Dec 2017 09:41:31 +0100 In-Reply-To: <874lp74dtz.fsf@elephly.net> (Ricardo Wurmus's message of "Mon, 04 Dec 2017 00:00:08 +0100") Message-ID: <87fu8qsx50.fsf@gnu.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Ricardo Wurmus Cc: 29528@debbugs.gnu.org Hi, Ricardo Wurmus skribis: >> + (home-page "https://github.com/jedisct1/blacknurse") >> + (synopsis "Proof of Concept for the Blacknurse attack") >> + (description >> + "Simple Proof of Concept for the Blacknurse attack. >> +Blacknurse is a low bandwidth ICMP attack that is capable of doing deni= al >> +of service to well known firewalls.") > > The first fragment is not a full sentence. > > Looking at this package I wonder why it should be part of Guix as it is > merely malware. I don=E2=80=99t see any reason why this should be instal= lable > through Guix. We are not in the habit of providing packages for > exploits. Putting it in =E2=80=9Cnetworking=E2=80=9D makes it seem like = this would be a > useful networking application, but it really is not. It just > demonstrates a bug in networked devices. > > @Ludo: what do you think? Indeed. I see two issues here: 1. a =E2=80=9Cproof of concept=E2=80=9D is typically something for expert= s of the field to study, rather than generally useful software; 2. it=E2=80=99s a tool whose purpose is to perform DoS attacks on routers= , and I find it questionable to provide it in Guix (not to mention that there=E2=80=99s no shortage of such programs that we could add!). So overall I=E2=80=99m reluctant to including it in Guix. Thoughts? Ludo=E2=80=99.