Hacker Newsnew | past | comments | ask | show | jobs | submit | couchwire's commentslogin

I think what you want is the "Full Disclosure" mailing list:

  http://nmap.org/mailman/listinfo/fulldisclosure


I'm pretty sure the affected people will visit the original site, and I'm not sure they will visit the site you mention.


PhpBB, the gift that keeps on giving. Isn't phpBB one of the most compromised pieces of software installed?


I'm pretty sure sendmail still wears that crown.


Unpatched Exim was giving it a pretty good run for a while.


Well well well. A sysadmin friend swears by exim as the safest mailserver software ever. I will enjoy ribbing him at the pub on Friday :)


Not a bad track record, but not flawless: http://www.cvedetails.com/vulnerability-list/vendor_id-10919...

The 9.3 one was world-destroying, nuke-from-orbit type bad.

"execute arbitrary code via an SMTP session" is not what you want to hear in a bug report.


Yikes!

I'm still impressed by qmail's track record: http://www.cvedetails.com/vulnerability-list/vendor_id-86/pr...


As good as qmail is, the official release is so far behind the times it's ridiculous. The unofficial patches, made unofficial by a stubborn refusal on the part of the author to merge them in, have fixed most of these issues, but then what's the point of using qmail if you have to use the untrusted version?

Sadly qmail is a lesson of how you can be correct and completely wrong at the same time.

Imagine a completely secure operating system that only runs on 32-bit systems. Could you actually advocate using it in a serious production capacity?


Just wait. Evidence suggests it is impossible to send mail without also providing remote code execution as a service.


phpBB (the software) wasn't compromised in this situation. An admin's account credentials were.


phpBB 2 was a total security nightmare and anyone running it or version 1 in production should be shot.

They realized how horrible things were and massively cleaned up their act around version 3. No published vulnerabilities issued since 2010, and only a handful for 3.x in general.

http://secunia.com/advisories/product/17998/?task=advisories


As a design language/guide/framework etc, I've spent 5 minutes on that link clicking around and I still don't really know what I'm looking at.


It's responsive, has animations when scrolling, pretty color scheme and only small amount of text. Oh, and let's not forget the social buttons. What else can a consumer hope for.

sǝuᴉlǝpᴉnƃ uƃᴉsǝp uɹǝpoɯ >;)


I'd say it's IBM's response to Google material design. IBM blog announcement: http://www.ibm.com/design/blog-page.shtml?ibm-design-languag...


That's the only thing their webpage said to me 'we too!'. I used to enjoy improving the visual qualities of data (Brett Victor and previous inspirations as extrapolation) but nowadays it's more of a fad of form over content.


This is exactly what I thought.


I know that planes are mostly automated these days but I wouldn't run a large website with N+0 redundancy, let alone get in a plane with the same resilience. Not sure how I feel about this.


> This movement toward the data base is in its infancy. Even so, it appears that there are now between 1,000 and 2,000 true data base management systems installed worldwide.

Imagine what technology right now exists where the numbers are small, which over the next few decades will be so common place. I would love to be an investor with foresight.


Although not mentioned, the elephant in the room is that teens dropping the TV for the Internet. I have three cousins, all between 13 and 17, none watch any tv. Why watch something when you have no choice the the programming. YouTube killed the television star.


You know I'm 36 and I don't have TV either.

It's now 10 years since I live without any TV and I can't say I miss the constant ads (unfortunately no adblock on TV) and poor programs.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: