[PLUG] Joe Jobbed - security considerations

alan alan at clueserver.org
Tue Oct 9 17:04:11 UTC 2007


On Tue, 9 Oct 2007, Rich Shepard wrote:

> On Tue, 9 Oct 2007, alan wrote:
>
>> Are you sure they are not being exploited?
>
>   Not at all. The information sent with the upgrades almost always report
> that there are no known exploitations of the identified vulnerability, but
> that leaves the whole world of unknown exploitations. Or, in Rummy's words,
> the "unknown unknowns."

Depends on who is making the claim. CERT is usually pretty good about 
that.  Some vendors less so.

-- 
Never trust a queue structure designed by a cryptographer.



More information about the PLUG mailing list