HP-UX is NOT Exploitable. It is NOT a security issue with HP-UX. HP-UX does have a benign buffer overflow which is the only reason HP-UX is listed as "effected" above. In any case, the buffer overflow has been fixed by HP.
What the hell is a "benign buffer overflow" ? Either the stack can be smashed or not - the benevolence of the attacker is left as an exercise to the reader...
Yeah, from my point of view, and I assume yours, you're right:
"ANY documenting is better than none."
But for the advancement of Free / Open Source software, the lack of documentation is a hindrance.
Development of most Free / Open projects rely heavily on the work of unpaid volunteers - who have the source, but no decent docs. Development of closed projects is done by paid developers, who have access to source code, documentation, colleagues in the same building, etc.
Docs for end users of linux kick way more than the windows equivalents (Tweak your registry to make WinXX Super-Robust, Ultra-Fast, and Mega-Colourful !), but docs for developers suck ass.
I recall a doctor noting that the parts of the world where AIDS is most prevalent are also some of the poorest in the world, and hence TV ownership is low.
He then pointed out that some idiot could easily use this statistic to 'prove' that TV ownership lowers the your chance of contracting the virus...
Slashdot Mirror
From the translation:
But which one makes with an icon of the Webs?
Throw away? Not possibly!
I love online translators.
From the CERT advisory linked above:
...
HP-UX is NOT Exploitable. It is NOT a security issue with HP-UX. HP-UX does have a benign buffer overflow which is the only reason HP-UX is listed as "effected" above. In any case, the buffer overflow has been fixed by HP.
What the hell is a "benign buffer overflow" ? Either the stack can be smashed or not - the benevolence of the attacker is left as an exercise to the reader
Yeah, from my point of view, and I assume yours, you're right:
"ANY documenting is better than none."
But for the advancement of Free / Open Source software, the lack of documentation is a hindrance.
Development of most Free / Open projects rely heavily on the work of unpaid volunteers - who have the source, but no decent docs. Development of closed projects is done by paid developers, who have access to source code, documentation, colleagues in the same building, etc.
Docs for end users of linux kick way more than the windows equivalents (Tweak your registry to make WinXX Super-Robust, Ultra-Fast, and Mega-Colourful !), but docs for developers suck ass.
Took a bit of digging, but here's a URL:
...
http://www.theelectricshoeco.com/
I seem to remember him walking across some desert while wearing them, to prove a point or or raise money for a cause or something
I recall a doctor noting that the parts of the world where AIDS is most prevalent are also some of the poorest in the world, and hence TV ownership is low.
...
He then pointed out that some idiot could easily use this statistic to 'prove' that TV ownership lowers the your chance of contracting the virus