2 ms·
Yes, "atrocious security" is not my reaction to a 15 year old MTA with two DoS and two RCEs.
by dfc 10y ago
Yes, "atrocious security" is not my reaction to a 15 year old MTA with two DoS and two RCEs.
- dozzie 10y agoOh yes, because denying that your code has a vulnerability counts as a good security practice. You know why this MTA has that low count of published bugs? Because nobody uses it anymore, so nobody looks at its code (and now factor in the ugliness of the code itself, which lowers the eagerness to look at the code even more). It's not because the code is (magically?) better.