Re: Is Mozilla's "patch" enough?

[Aviv Raff <avivra () gmail com>]

On Mon, 12 Jul 2004 20:34:44 +0200, Florian Weimer <fw () deneb enyo de> wrote:
> * Aviv Raff:
>
> > Security patches shouldn't be overridden unless intended too (i.e
> > uninstalled).
>
> This is not standard industry practice.  Especially if a patch might
> break previously working configuration, I completely agree that it's
> correct.

That's why there should be a way to uninstall the patch, as I wrote.


> For most people, having a working system is more important than having
> a secure system.

I agree.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html