7 ms·

I cannot even think of how many security vulnerabilities exists in these applications used for this "remake".

scottlocklin 12y ago
Mentioning one of these things you can't even think of would be useful. For example: I've used Ted for years; it's great.
Eiriksmal 12y ago
To quote the DSLR's author Very often, new versions of applications are heavier than older ones (Wirth's Law). If the old version already solves the problem ... without any compromise in security or stability, why make the switch [to a bloated new version]?
- cwyers 12y ago
  The author SAYS that, but that's ALL he says. There's nothing to back up the claim that the older versions are not a compromise in security. Are all known vulnerabilities patched? Are security fixes backported?
  - wangling2 12y ago
    Almost never: which may causes issues likes thoses! : From Wikipedia & OpenBSD: The affected versions of OpenSSL are OpenSSL 1.0.1 through 1.0.1f (inclusive). Later versions (1.0.1g and ulterior ) and previous versions (1.0.0 branch and older) are not vulnerable. Installations of the affected versions are vulnerable unless OpenSSL was compiled with -DOPENSSL_NO_HEARTBEATS. same applies for : http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-19990414-ios-nat-acl http://tools.cisco.com/security/center/content/CiscoSecurity... same applies for : https://blog.mozilla.org/security/2010/03/18/update-on-secunia-advisory-sa38608/ https://blog.mozilla.org/security/2010/03/18/update-on-secun... same applies for : http://www.debian.org/security/2000/20001013 http://www.debian.org/security/2000/20001013 same applies for : https://kb.isc.org/article/AA-01015/0 https://kb.isc.org/article/AA-01015/0 sticking to early versions (lazingly will save you)
lmedinas 12y ago
So just for starters... For those who downvoted my comment take a look: Dillo 0.8.6 (1) ; sylpheed (2) ; dhcpcd (3). According to the sources http://dslr.dimakrasner.com/i686 http://dslr.dimakrasner.com/i686 In Linux/FOSS distros using outdated software is really not good idea unless you know what you are doing or have support from the distro which have people that should be able to fix the security vulnerabilities. e.g. RedHat, Suse, Canonical, Debian. Using software which is dead upstream often makes distro maintainers want to remove the software from the repository because they are not able/want to maintain. BTW... I'm curious about which version of GTK+1.x is he using. GNOME does not support GTK+-1.x for years how wonder who fixes the security vulnerabilities also. 1 - http://www.cvedetails.com/version/78795/Dillo-Dillo-0.8.6.html http://www.cvedetails.com/version/78795/Dillo-Dillo-0.8.6.ht... 2 - https://lists.debian.org/debian-security/2005/11/msg00120.html https://lists.debian.org/debian-security/2005/11/msg00120.ht... 3 - http://www.cvedetails.com/cve/CVE-2012-2152/ http://www.cvedetails.com/cve/CVE-2012-2152/

Mentioning one of these things you can't even think of would be useful. For example: I've used Ted for years; it's great.

Eiriksmal 12y ago

To quote the DSLR's author Very often, new versions of applications are heavier than older ones (Wirth's Law). If the old version already solves the problem ... without any compromise in security or stability, why make the switch [to a bloated new version]?

cwyers 12y ago
The author SAYS that, but that's ALL he says. There's nothing to back up the claim that the older versions are not a compromise in security. Are all known vulnerabilities patched? Are security fixes backported?
- wangling2 12y ago
  Almost never: which may causes issues likes thoses! : From Wikipedia & OpenBSD: The affected versions of OpenSSL are OpenSSL 1.0.1 through 1.0.1f (inclusive). Later versions (1.0.1g and ulterior ) and previous versions (1.0.0 branch and older) are not vulnerable. Installations of the affected versions are vulnerable unless OpenSSL was compiled with -DOPENSSL_NO_HEARTBEATS. same applies for : http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-19990414-ios-nat-acl http://tools.cisco.com/security/center/content/CiscoSecurity... same applies for : https://blog.mozilla.org/security/2010/03/18/update-on-secunia-advisory-sa38608/ https://blog.mozilla.org/security/2010/03/18/update-on-secun... same applies for : http://www.debian.org/security/2000/20001013 http://www.debian.org/security/2000/20001013 same applies for : https://kb.isc.org/article/AA-01015/0 https://kb.isc.org/article/AA-01015/0 sticking to early versions (lazingly will save you)

lmedinas 12y ago

So just for starters... For those who downvoted my comment take a look: Dillo 0.8.6 (1) ; sylpheed (2) ; dhcpcd (3). According to the sources http://dslr.dimakrasner.com/i686 http://dslr.dimakrasner.com/i686 In Linux/FOSS distros using outdated software is really not good idea unless you know what you are doing or have support from the distro which have people that should be able to fix the security vulnerabilities. e.g. RedHat, Suse, Canonical, Debian. Using software which is dead upstream often makes distro maintainers want to remove the software from the repository because they are not able/want to maintain. BTW... I'm curious about which version of GTK+1.x is he using. GNOME does not support GTK+-1.x for years how wonder who fixes the security vulnerabilities also. 1 - http://www.cvedetails.com/version/78795/Dillo-Dillo-0.8.6.html http://www.cvedetails.com/version/78795/Dillo-Dillo-0.8.6.ht... 2 - https://lists.debian.org/debian-security/2005/11/msg00120.html https://lists.debian.org/debian-security/2005/11/msg00120.ht... 3 - http://www.cvedetails.com/cve/CVE-2012-2152/ http://www.cvedetails.com/cve/CVE-2012-2152/