After takin' a swig o' grog, Mart van de Wege belched out
  this bit o' wisdom:

> "amicus_curious" <[email protected]> writes:
>
>> Even so how likely is it that the target of this exploit is savvy
>> enough to have combed through the source and implemented his own fix
>> enable by knowing which library version of BusyBox was in use in his
>> $25 router? It would be more probable that he would win the
>> Powerball Lottery twice in a row.
>>
> You're excluding the middle. Between not knowing anything and hacking
> the firmware yourself is the possibility that knowing the exact
> version numbers of the component parts gives the owner the possibility
> to determine how vulnerable they are, and to take steps, ranging from
> taking in the router to the reseller to have it serviced, or patching
> it themselves, and everything in between.
>
> Then again, you really don't think these things through, now do you?
> Your every effort in this thread screams intellectual laziness, if not
> outright stupidity.

Unfortunately, that covers an awful lot of computer users.

-- 
People disagree with me.  I just ignore them.
                -- Linus Torvalds, regarding the use of C++ for the Linux kernel
_______________________________________________
gnu-misc-discuss mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/gnu-misc-discuss

Reply via email to