I feel that the last comment as written by a someone who does not grasp the spirit of the article. In talking abou speaking to the "group" of apache, there was no implied big buisness endorsement. The apache developers where thes ones who should of been contacted, and the patch that ISS provided did not fix the scope of the problem.
Good job on the article. An understanding needs to be reached. Open source is not a weak melting pot by any means, and I fail to understand how the last reader found the author presenting it so.
If you are in the security field sir, please, pick up YOUR paper and find YOURSELF a new line of work.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/91/13358#13358