Not the first time a "vendor" has put up cash to ferret out something.

Daniel J. Bernstein the author / vendor of qmail put up a cash reward in 1997 (of $500 granted) that is still open today for anyone that can find a "verifiable security hole in the latest version of qmail". QMail is still at that version because there hasn't been any found. Additionally another group of users put up a $1000 reward for the same reason for 1 year that went unclaimed. You can read about it at http://cr.yp.to/qmail/guarantee.html

Frankly, I'm tired of seeing people that it's this or it's that, that are the cause of our virus and worm problems. It's not just crappy or bug ridden software. It's not some jerk sitting in a dark corner getting his/her jollies off of screwing with other people. It's the developers out there you don't care enough about their software to make sure it isn't bug ridden or security flawed that have given us this problem. Make sure they fix it before they release a new version!

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/199/23843#23843