[gentoo-security] Re: Let's blow the whistle

[Peter Simons]

Hans-Werner Hilse writes:

 > But i doubt that you really manage to hack up my BIND,
 > place a transparent proxy in my connection to the net or
 > convince me to use your fake mirror.

Step #1:  The problem doesn't exist.

Step #2:  The problem may exist, but it isn't exploitable.

Step #3:  The problem may be exploitable, but it is
          extremely unlike to happen.

Step #5:  Well, maybe it is a problem, but there are far
          more serious problems, so we don't need to fix it.

Step #6:  Even if it were worth fixing, it is way too
          difficult to do.

Step #7:  Alright, alright. We will fix it as soon as we
          find the time.

Step #8:  Great job, idiot, now that you have drawn attention
          the fact that clueless user's machines can be
          hacked, it is _your_ fault rather than the ours.

Step #9:  Please download the latest Service Pack.


--
gentoo-security@g.o mailing list