OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-disclosure] What is wrong with schools these days?

From: Michael Holstein (michael.holsteincsuohio.edu)
Date: Tue Apr 25 2006 - 14:12:09 CDT

> You know, having made a few NTexploit lists in the past, I wanted to
> make the point the M$ was less secure. Unfortunately the facts were
> against me.

You do realize that in this case the "facts" have more to do with how
things are reported by the two companies.

Case in point : a typical IIS security advisory will read ...
        "MS06-xxx" Vulnerability in IIS

whereas ones for Apache will be much more specific ...
        "CVE-xxx" fixed tiny little bug in some script
        "CVE-xxx" fixed different tiny little bug in other script

I agree though that $anyOS is dangerous in the case of 'clue <= 0'.

/mike.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/