User: Password:
|
|
Subscribe / Log in / New account

Counting vulnerabilities

Counting vulnerabilities

Posted Jun 25, 2007 14:14 UTC (Mon) by nix (subscriber, #2304)
In reply to: Counting vulnerabilities by Randakar
Parent article: Counting vulnerabilities

But everyone does that.

To be specific: everyone quietly fixes bugs which *might potentially* be considered security vulnerabilities, if just because they don't realise that they're vulnerabilities at the time they fix them.

You don't need to be nefarious to do that.

(Equally, known vulnerabilities in unreleased or released-as-development versions of free software are often fixed without formal vulnerability announcements, on the basis that anyone who was bitable by this bug is going to be upgrading often anyway, or why else would they be running a development release?)


(Log in to post comments)

Counting vulnerabilities

Posted Jun 28, 2007 16:45 UTC (Thu) by amikins (guest, #451) [Link]

I think the allegation here is more to the effect of patching installed versions without any notification that there is an issue or that the system is updating itself.
I haven't seen anything to that effect, but then I avoid learning anything about Vista when I can.. It just infuriates me.


Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds