> TIFF is a great example of how a terrible specification can lead to endless security vulnerabilities in parsers. TIFF is an Adobe spec, and we all know how g

> TIFF is a great example of how a terrible specification can lead to endless security vulnerabilities in parsers. TIFF is an Adobe spec, and we all know how great Adobe is at security ... Actually, TIFF predates Adobe involvement. It was inherited by Adobe when it bought Aldus. The file format was designed in 1986 and last revised in 1992. That's 21 years without an update -- an eternity in the computer world. Ironically, TIFF used to be known as "Aldus-Microsoft TIFF." Aldus designed the format, and Microsoft provided the marketing muscle to establish it as a de facto standard.