🚀 go-pugleaf

In article <40h9vo$fbq@thetics.europa.com>, mbell@atheria.europa.com (Max
Bell) wrote:

> Why
> they did this is a mystery to me, but so is the fact they still do not ship
> current versions (though they usually manage to turn off the debug option).

Maybe.  I just saw another CERT advisory about old versions of sendmail in
comp.security.announce:
=============================================================================
CA-95:08                          CERT Advisory
                                  August 17, 1995
                            Sendmail v.5 Vulnerability
-----------------------------------------------------------------------------

The CERT Coordination Center has received reports of a vulnerability in
sendmail version 5. Although this version is several years old, it is still 
in use. The vulnerability enables intruders to gain unauthorized privileges,
including root.


Good thing that no one, be it individual or company, actually has to take
any kind of responsibility for allowing these holes to persist.


> I think that with a little historical research you will find many companies
> that have engaged in illegal behavior when they felt the chances of being
> caught were small and the profits to be made were large.

Sure.  However, do you really think that Microsoft is dumb enough to
believe that their chances of being caught are small?  You might not like
them, but they certainly aren't a stupid company.
-- 
        Nevin ":-)" Liber       nevin@CS.Arizona.EDU    (520) 293-2799
                                                office: (520) 621-1815