🚀 go-pugleaf

"techie" <none@dontspamme.invalid> wrote in message
news:pan.2004.02.15.17.05.40.121655@dontspamme.invalid...
> On Mon, 16 Feb 2004 00:49:31 +1000, W wrote:
> So you admit that Windows end-users have no way of knowing how much
> Windows source code has been scrutinized?

Does anyone know how many people are scrutinising the Linux source?  What
about the userland code?

If you compare tit-for-tat in the vulnerabilities department, it is almost 1
to 1, at the moment M$ just in front with a higher number of vulnerabilities
usually in stupid locations, derived by their own implementation of RFC,
RFD, ISO, ANSI and what ever other standards there are.

The key problem with the SDLC of Windows, there is too much of a focus to be
`Industry Standard` whilst trying to be unique, and it is this uniqueness
that causes the vulnerabilities.

Is it the coders fault, is it the testers fault, what about the after market
testers, no, with M$ it is a management problem, which is very common in all
coporate sectors, know-nothing manager (or worse an manager who does know,
but to dumb to think for themselves) setting unrealistic tasks and goal then
scratching their heads asking `why did that fuck up?`

> How many of these people get to see the source code and how many find
> the bugs only by randomly probing what amounts to a black box? Or don't
> we know that, either?

Considering that the last NDS I read had the threat of legal action if I
devulged any information about the product in question,  it is a very good
possiblity that those involved with the life cycle are not allowed to talk
about for fear of legal action.

> >
> > Seek and ye shall find the answer to the question that has plagued and
> > eluded the world - of course there is a NDS/A that needs to be agreed to
> > prior to starting.
>
> So even if someone does find a security vulnerability, they're not allowed
to
> tell the rest of us about it?

Is this an old `tale`, I am sure when I have reported certain things to CERT
etc no `suit` came knocking at the door.