Replies

That's not to say the security community isn't prone to a particular brand of lunacy all of its own. My colleague Josh Mehlman is familiar with the particular psychological disorder that seems to plague certain pockets of the IT world. His gripe is with Linux fundamentalists--you know, the guys with penguin socks who write MS as "M$" because they think they're making a social commentary.

I'm waiting the fundamentalists to show up here with their "Get Penguined" comments and bitmaps!

One thing that Ballmer had in mind with his comments are websites like xfocus.org. Does anyone think it is a good thing for them to have this page on their website: Analysis of RPC Long Filename Heap Overflow. There is absolutely no legitimate use for this code other than to spread viruses and worms.

And if the site did not exist, M$ would not even be giving the lip service they have been recently to security. I say lip service because of idiotic comments like these from Balmer.

'It would be best for the world' WTF?!?!?! It would be best for M$' bottom line is how you should really read that statement.

One thing that Ballmer had in mind with his comments are websites like xfocus.org. Does anyone think it is a good thing for them to have this page on their website: Analysis of RPC Long Filename Heap Overflow. There is absolutely no legitimate use for this code other than to spread viruses and worms.

Sure there is, for researchers to better understand how this class of problem works so that they can discover more of this type of flaw in the future, making for a safer computing experience for all.