lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
From: frank at knobbe.us (Frank Knobbe)
Subject: Web sites compromised by IIS attack

On Thu, 2004-07-01 at 10:03, Denis Dimick wrote:
> LMAO.. I see it now, your makeing a joke out of it..

Heh... you are quickly distracted from the main issue.

List me 5 other products where is it assumed and accepted that the
purchased products has flaws.

Quality of software has gone downhill over the last 10 years or so, but
only slightly each year. The change is so small that it becomes
unnoticed and accepted as new norm. You have to look back several year
to see the difference.

Yes, complexity of software is increasing and with it the amount of
flaws. But complexity of hardware is increasing as well, and hardware is
designed by humans too. Why does the industry manage to turn out
relative good quality hardware? Because it's a pain in the ass to fix a
broken hardware product. With software you don't have this pain factor,
so it has become accepted to sell flawed software products and then fix
it later.

That burden of fixing the flawed product is now on the consumer, not the
producer. That's what's wrong. The producer should fix the problem, not
you. 

Is that clearer now?

Regards,
Frank

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040701/790f414d/attachment.bin

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ