Re: Is this list still active?

[email protected] Fri, 26 Nov 2004 21:43:00 -0500
Newsgroups gmane.comp.security.programming
Message-ID <[email protected]>
On Fri, 26 Nov 2004 16:54:52 +0200, Alexander Klimov said:
> It is hard to make any statistical statements based on Internet experience:
> most of securityfocus community surely care about security, but in reality the
> statistics completely different -- almost nobody cares.

Hey, 40 million zombies can't be wrong.. :)

Unfortunately Alexander is quite right - those who care and have a clue
are literally outnumbered 10,000 to 1 or so.  So there really isn't any way
to get better security unless we deploy it invisibly to the end user.

Of course, the idea of pushing updates to them is scary as well, as a
UK government ministry found out when they accidentally killed 80% of their systems:

http://it.slashdot.org/article.pl?sid=04/11/26/140211&tid=201&tid=128&mode=nocomment
signature.asc (application/pgp-signature, 226 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQFBp+mzcC3lWbTT17ARAufdAJ439pd20++Wu96UqhbNlhCJ2TOJtgCgp+dT
9sDOho8/q65WgdhZe912Joo=
=H/sM
-----END PGP SIGNATURE-----