"warning about IIP" freesite

Hi, all! :)

On Monday, July 28, 2003 08:51, auto97841-revL73yDgGBWk0Htik3J/[email protected] wrote:
> SSK@wHOf1LwI6PUVcgDwqEu0CuZ6bRAPAgM,W6k8nbDP~T9StSHXQg5D9g/1.html
>
> I saw that this morning and wanted to bounce it at y'all (no, I didn't
> write it, as you can hopefully guess since it has some factual inaccuracies
> ;)
>
> if anyone wants to write up a 'rebuttle' and post it to freenet, that'd
> be cool.  i could toss it into the next edition of my flog or it could
> go as a standalone response page (or even on the iip freesite ;)
>
> Anyway, just thought i'd mention it.  If no one wants to write up a
> response to their 7 points, I'll post one up on wednesday or so.
>
> (attached is the html of the page)
> -jrandom

	I don't know how many people noticed this, but there is one part of this 
"warning" that really popped out at me, and it wasn't even in the list of 
points. Here it is:

		"Issues I've found after looking at the source for 15 minutes (ie. there's
	probably more, and ie. I might be wrong)"

	15 MINUTES!!! This guy looks at the source code for 15 minutes and assumes he 
has come across major security problems. How can you know source code with 
only 15 minutes of review!? I've been working with the IIP source for what's 
probably more than a year now, and _I_ don't even know it well! This is 
RIDICULOUS!
	I think nop's "minimal" rebuttal is more than enough to make it very clear 
that this fellow doesn't understand that of which he speaks. (Exactly _why_ 
does this person think iip.invisiblenet.net is the ircd server?) He makes a 
lot of mistakes. My advice to the poster of this "warning" would be this: 
Next time you post a freesite saying something is relatively insecure, try 
reviewing it for more than 15 minutes. One week of solid review would be much 
better.

	Anyway, that's my $.02.

	-- Hezekiah

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQA/JWgOeHiZTMH32ioRAt64AJ0Z5tApJN3RZnzZ0UqeiQnvKjjJ5ACfc4Jd
xlPLWuCYU0coHJAS8XAnDkI=
=OIgi
-----END PGP SIGNATURE-----