On Sun, 5 Jul 2009 17:31:58 +0000 (UTC) Thorsten Glaser wrote: > Some things are another issue actually. For example, > OpenSSL is separate from this _again_. There is no > JavaScipt(tm) in Lynx, luckily, so that one wouldn't > be affected either. You'd really have to look where > entropy is used in the source code.
right, like i said, lynx likely is not affected by any of the issues in this paper, but using the precautionary principle, it's better to harden for the future unknown attacks than to be caught off guardby an attack that you could have nullified. mike _______________________________________________ Lynx-dev mailing list [email protected] http://lists.nongnu.org/mailman/listinfo/lynx-dev
