Which just leads us back to the never ending question..

Which came first, the exploit or the patch?  :-).

OK, I know the answer before everyone jumps on this....  For OSS often it's
the patch, and for proprietary it's almost always the exploit..

Cheers, Me.

----- Original Message -----
From: "Zane Gilmore"

Although the patch is not a formal one I think that this shows one of the
most
wonderful things about open-source software.

No sooner has someone found a problem with the software then the fix is up
within hours for someone who might be desperate for the fix. This is
unattainable by most proprietary shops probably even M$.

There is probably very little chance that an exploit can be written before
the
fix.

On Tue, 18 Jun 2002 20:34, Chris Hellyar wrote:
> OK let me rephrase that...  No patch outside the cvs yet...  (He says
> trying to make his comments true, as I didn't check the cvs...)
>
> The again, I don't like the bleeding edge enough to apply cvs code to
> production servers, I wait until it gets to the patches dir on their
> server..
>
> Call me a boring old fart :-).
>
> Cheers, Chris.
>
>
>
> ----- Original Message -----
> From: "Michael Beattie"
>
> > On Tue, Jun 18, 2002 at 12:45:27PM +1200, Chris Hellyar wrote:
> > > No patch yet either, Man the pumps!  :-).
> >
> > http://cvs.apache.org/viewcvs.cgi/apache-1.3/src/main/http_protocol.c
> >
> > Mike.
> > --
> > Michael Beattie <[EMAIL PROTECTED]>
> >
> > "In the beginning the Universe was created. This has made a lot of
people
> > very angry and been widely regarded as a bad move." - Douglas Adams


Reply via email to