OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Noah L. Meyerhans (noahm_at_debian.org)
Date: Wed Oct 02 2002 - 13:16:49 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed, Oct 02, 2002 at 08:09:33PM +0200, WebMaster wrote:
    > In March 1997, I offered $500 to the first person to publish a
    > verifiable security hole in the latest version of qmail...
    > My offer still stands. Nobody has found any security holes in qmail.

    <snip>

    > it s because we can read on pureftpd.org:
    >
    > "the number of root exploits found since the very first released
    > version is zero"
    >
    > we can t read things like that on postfix.org and proftpd.org

    If your criteria for judging the security of a piece of software are
    based solely on what you read on the web sites distributing that
    software, then why aren't you running OpenBSD? After all, they have on
    their web page "One remote hole in the default install, in nearly 6
    years!", and Debian does not have that.

    noah 

    -- 
 _______________________________________________________
| Web: http://web.morgul.net/~frodo/
| PGP Public Key: http://web.morgul.net/~frodo/mail.html

    -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org

    iD8DBQE9mzgRYrVLjBFATsMRAuBoAJ9NwhEM6mIB/PMSiuLlRCbZANnqwwCcCl2i Owdj4e4pKdSA5B5+6UgE/M4= =pa+1 -----END PGP SIGNATURE----- 

    -- 
To UNSUBSCRIBE, email to debian-security-requestlists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmasterlists.debian.org