Re: Public disclosure of discovered vulnerabilities

"Hank Oredson" <horedson@earthlink.net> writes:
> Oh my. Did you know there was computing before bugtraq? Are you
> aware that there were bugs (and exploits!) prior it it? You are
> talking about NEW stuff, we are talking about OLD stuff. OLD as in
> 40 years ago. The early 60s. For some odd reason nobody posted those
> to bugtraq ...

in a similar thread from the end of 2004 thru early 2005 ... I raised
the subject of the air force evaluation of multics system which
appeared to never had a buffer overflow exploit.
http://www.garlic.com/~lynn/2002l.html#42 Thirty Years Later: Lessons from the Multics Security Evaluation
http://www.garlic.com/~lynn/2002l.html#44 Thirty Years Later: Lessons from the Multics Security Evaluation
http://www.garlic.com/~lynn/2002l.html#45 Thirty Years Later: Lessons from the Multics Security Evaluation

a buffer overflow posting collection
http://www.garlic.com/~lynn/subpubkey.html#overflow

-- 
Anne & Lynn Wheeler | http://www.garlic.com/~lynn/