Re: [friam] SOSP History Day

You may be surprised at the configuration variation in the wild. A specific vulnerability may be the result of combinations of components.

As an example from the enterprise space. A measurement of the deployments of jvms on servers in a major bank showed a mean of 6 versions per server for those computers that had java installed (which was most of them, iirc). Since the variation is not normally measured, it’s not likely to be well controlled.


> On 12 Oct 2015, at 01:46, Raoul Duke <[email protected]> wrote:
> 
> Apologies for the immediately preceding fat fingered message send :-(
> 
>> Only if you are already vulnerable. The vulnerability in my sqrt function
>> does not itself make you vulnerable, even if it does exploit a vulnerability
>> you already have.
> 
> That sounds more safe than I think things are in the real world? I
> expect if there's a vulnerability, a lot of people will have it; we
> don't all run /that/ many different OSs, I'd guess.
> _______________________________________________
> cap-talk mailing list
> [email protected]
> http://www.eros-os.org/mailman/listinfo/cap-talk

_______________________________________________
cap-talk mailing list
[email protected]
http://www.eros-os.org/mailman/listinfo/cap-talk