2000-11-14-15:01:07 Charles Cazabon:
> However, as far as qmail goes: all the crackers in the world have
> had access to the qmail source code and design documentation for
> years, and none have yet found an exploitable security hole. You
> could consider that a fairly thorough audit-by-fire.
And a case could be made that the charming and personable way qmail
has been represented in various public fora makes this audit-by-fire
even better: at this point, there are enough people around the world
who hate djb's guts and would never touch anything that he even
advocated much less wrote, just because of how much they like his
way of carrying on discussions in public mailing lists, that I kinda
expect more than one person has gone wading through qmail with blood
in his eye, desperately hoping to wipe the smug grin off djb's face
and get him to knock off the damned gloating already. Hasn't
happened yet. _That's_ trial by fire.
In a backwards kind of way this reminds me of a funny I heared
referenced recently, apparently some exceptionally unnaturally
clueless spammer harvested _bugtraq_. Makes me feel all warm and
snuggly just thinking about it:-). Hmm. Wonder if he was located in
the mid-east, maybe all this news about a "cyber-war" there is just
bystanders being taken out by the schrapnel thrown from the smoking
hole where that spammer used to reside.
-Bennett
PGP signature
