Re: And how long have buffer overflows been around?

[Nick FitzGerald <nick () virus-l demon co uk>]

Valdis.Kletnieks () vt edu replied to Glenn_Everhart () bankone com:

> The only problem with that theory is that VMS *had* a security design, and
> there isn't one in NT.  The only design overlap there is that Microsoft got
> some of the VMS design team to come on board for Win/NT.  NT got stuck with
> having to be backward-combatable with Win 3.1, and you can fill in the blanks
> from there....

Methinks you confuse "design" with "default configuration".

NT 3.1 had a reasonable security design at its core, but an OOTB  
installation produced a security configuration "compatible with 
Win3.x".


Regards,

Nick FitzGerald

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html