full-disclosure - Bill Gates blames the victim

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: petr at blade-runner.mit.edu (Petr Swedock)
Subject: Bill Gates blames the victim

"Richard M. Smith" <rms@...puterbytesman.com> writes (quotes):

   ;; 
   ;;    Q. "The buffer overrun flaw that made the Blaster worm 
   ;;    possible was specifically targeted in your code reviews 
   ;;    last year. Do you understand why the flaw that led to 
   ;;    Blaster escaped your detection?"
   ;; 
   ;;    A. "Understand there have actually been fixes for all of 
   ;;    these things before the attack took place. The challenge 
   ;;    is that we've got to get the fixes to be automatically 
   ;;    applied without our customers having to make a special effort."

"Don't trust our software. But do trust our patching/update process..."

Nice.

Peace,

Petr