nanog mailing list archives

Re: [Full-Disclosure] Gates: 'You don't need perfect code' for good security


From: doug () safeport com
Date: Sat, 1 Nov 2003 12:36:24 -0500 (EST)


If you take all of this together we have Microsoft is going to supply us with
code that does not work that will allows programmers who know what they are
doing to talk to any windows system in the world.

Cool.

On Fri, 31 Oct 2003, Andrew D Kirch wrote:


You guys missed it, Gates is utterly right.  There is no such thing as perfect
code.  Where he errs is that his code is utter and unremarkable crap based on
poorly conceived designs based on a percieved difficulty of use problem.  The
simple solution was to design it for the average person and then tell anyone
who couldn't figure it out to get stuffed. Sadly that didn't happen here, or
when dcom came out, or when activex sucked, or when dcom came out again, or
every time they release Outlook (Express).


On Fri, 31 Oct 2003 17:43:16 -0500
"Brian Bruns" <bruns () 2mbit com> wrote:


My favorite quote is...

BG: Until we had this concept of Web services, software on the Internet
couldn't talk to other software on the Internet. The only thing that worked
was you could move bits - that's TCP/IP - or you could put up screens -
that's HTML - but software couldn't talk to software.


Its good to know my Putty application can't talk to my OpenSSH server, or
that my EXIM mail server can't actually talk to other mail servers.


:-)

_____
Douglas Denault
doug () safeport com
Voice: 301-469-8766
  Fax: 301-469-0601


Current thread: