Re: Advisory 02/2004: Trillian remote overflows -> maybe this is off-topic, but...

[Stefan Esser <s.esser () e-matters de>]

Hi,

> Now I'm sick of looking through commit logs, but I think you get the
> idea.  Also, by this point, Trillian is sending us code, not
> vice-versa.  The only code that was ever sent to them was the auth code,
> which Sean wrote.  Sean is allowed to send that code to anyone he
> pleases.  As much of a stickler as he is for the GPL, I really don't
> think he'd violate it so blatently and publically.

Ehmm do I read correctly what you just wrote? The ONLY code that was ever sent
to them was the auth code? Okay so you actually just have said the same my
advisory says: Code that was never given to Trillian and was written by the
Gaim project is in Trillian.

Thank you

Stefan




-- 

--------------------------------------------------------------------------
 Stefan Esser                                        s.esser () e-matters de
 e-matters Security                         http://security.e-matters.de/

 GPG-Key                gpg --keyserver pgp.mit.edu --recv-key 0xCF6CAE69 
 Key fingerprint       B418 B290 ACC0 C8E5 8292  8B72 D6B0 7704 CF6C AE69
--------------------------------------------------------------------------
 Did I help you? Consider a gift:            http://wishlist.suspekt.org/
--------------------------------------------------------------------------

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html