Richard Gaskin wrote
> Scott Raney's opinion on buffer overflows:
> <https://www.mail-archive.com/

> metacard@.runrev

> /msg02659.html>

Many thanks for posting this message from Scott Raney.
>From this message, I found the Top 25 software errors:
http://www.sans.org/top25-software-errors/

And Buffer Overflows is at the top in his category:
Risky Resource Management

http://cwe.mitre.org/top25/index.html#CWE-120

This incident just generates more questions:

Who made this specific change in the OpenSSL code?
Did he actually knew the consequences of the
changes that he committed?
Why nobody else noticed, until now?
Who knows what evil lurks in the source of trusted software?

Al






--
View this message in context: 
http://runtime-revolution.278305.n4.nabble.com/The-Revenge-of-Buffer-Overflows-tp4678133p4678137.html
Sent from the Revolution - User mailing list archive at Nabble.com.

_______________________________________________
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Reply via email to