Re: News, dumbug, prediction rebuttals.

[Adam Shostack <adam () homeport org>]

On Thu, Dec 22, 2005 at 12:23:42PM -0800, Blue Boar wrote:
| Dave Aitel wrote:
| >IMO, intense auditing is really just a warm up. OpenSSH is the most
| >intensely audited code on the planet and it still has problems that
| >require them to change their architecture to avoid exposing too much
| >code to the pre-auth world.
| 
| Is it really "require", or are they simply doing more paranoid things, 
| which have served them well in the past?

Your point about "required" is well taken.  At the same time, it seems
wrong to call behaviors which have served well "paranoid." 

Adam