full-disclosure - Re: MS Security Response is a bunch of half-witted morons

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20040312150835.B502.THMAILLISTS@yahoo.com>
From: thmaillists at yahoo.com (Troy)
Subject: Re: MS Security Response is a bunch of half-witted morons

On Fri, 12 Mar 2004 16:09:21 -0500, jim_walsh@...dyear.com wrote:

> Your points are well taken and understandable.  But if you are supporting 
> a M$ operating system enough to need to read the SB's, then wouldnt your 
> IE be up to date to read them?  Even if you would just use IE to read M$'s 
> site?  To sit and scream about web design decisions in this mailing group 
> seems a little childish.  And if one was to argue that "Aanyone needs to 
> read these articles not just people that support M$ OS's", well to 
> that...most people that have a M$ OS as an end user have auto update 
> turned on and dont even think twice about it...if they update at all.

I took Nick's comments differently. The way I understood it, the problem
is that Microsoft forces you to use a scripting language to read a
security article. A scripting language could have security problems. As
a result, many people have JavaScript disabled for security reasons,
regardless of their version of IE.

I agree with Nick. It is ironic and unfortunate that MS would force
users to turn on a potentially unsafe scripting language to read a
security bulletin.

-- 
Troy