Hmm... Jon's article actually seems to follow the general consensus of the Open Source Community. I haven't heard many (if any) praise ISS on their actions. And on top of that they are the "Big Company" that you speak of. Sure they included a patch, but by many accounts (including Apache's) it didn't work. They do seem to have handled the OpenSSH issue fairly well but just made a simple FUBAR of Apache.

At worst I think his article could be criticized for rehashing whats already been said on all of the mailing lists, but you seem to prove that it does need to be said.

Go back to reading /. and remember once something is written the burden is on the reader to understand it.



[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/91/13311#13311