I alone reported I think 5 vulns to the developers, several of which could be exploited.Sometime right around when I reported those someone else reported 12, plus there have been numerous other reports since then. I'm not sure where your numbers are coming from, but they're slightly off. The developers are pompous asses who can't code and don't take friendly advice; hence the nice stash of gaim 0day in my ~/hax0r folder.
My bigger point is not that gaim sucks, which it does, but it's that "security columnists" should keep their mouth shut instead of foolishly preaching from their open source soapbox, and blindly supporting every POS open source project when in reality they have idea what they're talking about.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/385/33154#33154