full-disclosure-uk January 2010 archive
Main Archive Page > Month Archives  > full-disclosure-uk archives
full-disclosure-uk: Re: [Full-disclosure] Two MSIE 6.0/7.0 NULL

Re: [Full-disclosure] Two MSIE 6.0/7.0 NULL pointer crashes

From: ☣ frank^2 <frank2_at_nospam>
Date: Thu Jan 21 2010 - 00:17:32 GMT
To: Dan Kaminsky <dan@doxpara.com>

On Wed, Jan 20, 2010 at 10:25 AM, Dan Kaminsky <dan@doxpara.com> wrote:
> Seriously. I mean, just look at Linux, Firefox, and OpenOffice.
> Pristine code, not a single security vulnerability between them :)

That's a red herring. His point was the public perception of the software company-- true or not-- would be hindered because Microsoft is all-encompassing. Compared to the world of open-source, the risk is distributed by the sheer virtue of software engineering being distributed amongst thousands of entities. This means that the vulnerabilities are spread across different parties, rather than having all vulnerabilities encompassed by a single party-- in this case, Microsoft.

His argument was irrelevant to corporations vs. open-source being more vulnerable than one another-- it was simply a commentary on distributed risk in software engineering. -- "Did you and them get your degree from the same university of trolls? I have mistaken nothing for nothing. Fuck you." _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/