[4779] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

Re: Real world vs. the lab (was Re: Latest Java hole is Netscape/Sun only)

daemon@ATHENA.MIT.EDU (David W. Morris)
Wed Mar 12 05:12:29 1997

Date: Tue, 11 Mar 1997 23:34:40 -0800 (PST)
From: "David W. Morris" <dwm@xpasc.com>
To: Jay Heiser <Jay@homecom.com>
cc: WWW-SECURITY@ns2.rutgers.edu
In-Reply-To: <33257F1A.618A@HomeCom.com>
Errors-To: owner-www-security@ns2.rutgers.edu



On Tue, 11 Mar 1997, Jay Heiser wrote:

> today. (I buy into the 'all software has bugs' argument).

Well, at least all software that does anything significantly useful has
at least one bug in at least one of the following ways:

1.  The actual code doesnt match the design
2.  The design failed to consider some issue so though we can prove (which
    I find suspect anyway) the implementation flawlessly represents the
    design, the result still is broken
3.  The operating environment which the software depends on has a bug

Dave

(Phill HB can flame a bit a times so I've gotten this off the chest w/o
becoming a target ... hope you don't feel like I've wasted your time.)

PS#2 ... I'm beginning to really wonder about your phoney unsubscribe
theory ... don't know if you follow the ietf@ietf.org list but today
there have been tons of remove requests with multiples from single users.


home help back first fref pref prev next nref lref last post