full-disclosure - Re: Internet Explorer URL parsing vulnerabi lity

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <6130FAF67D15D411BF7100E01899071F866210@stork.mightyoaks.local>
From: david.vincent at mightyoaks.com (David Vincent)
Subject: Re: Internet Explorer URL parsing vulnerabi
	lity

>   To be fair, do you really think that fixing all currently known, but
> still unfixed bugs would cost millions of dollars?
> 
>   Does hiring people like Lyu Die Lu costs millions of dollars?

because you can find the bugs does not mean you can fix the bugs or solve
the engineering problems which created them in the first place.

>   Internet Explorer is a special case. It just sounds as if Microsoft
> doesn't want to maintain the product any more since the very 
> first version
> of IE 6. As if some day, Bill said "ok, let's freeze everything. Stop
> working on IE, just take the current state of the CVS tree and it will
> remain the same during 10 years".

wouldn't that be sourcesafe, not cvs?  ;P

cheers

-d