From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: =?utf-8?Q?=C3=93scar_Fuentes?= Newsgroups: gmane.emacs.help Subject: Re: CVE-2017-14482 - Red Hat Customer Portal Date: Fri, 29 Sep 2017 18:51:01 +0200 Message-ID: <87zi9dqwi2.fsf@qcore> References: <1b3bec6e-d4d5-37a7-ba54-49bd2d8281bd@yandex.com> <86k20qbcu9.fsf@zoho.com> <86o9q0a8zc.fsf@zoho.com> <87vak8rwcx.fsf@qcore> <87mv5is54g.fsf@qcore> <4d048ea0-5c54-f5ba-c903-78614480ac76@yandex.com> <83a81d8ylf.fsf@gnu.org> <20170929145921.GA5297@TP-x61s.localdomain> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1506703922 27342 195.159.176.226 (29 Sep 2017 16:52:02 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Fri, 29 Sep 2017 16:52:02 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux) To: help-gnu-emacs@gnu.org Original-X-From: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Fri Sep 29 18:51:57 2017 Return-path: Envelope-to: geh-help-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dxyVx-00069D-Ur for geh-help-gnu-emacs@m.gmane.org; Fri, 29 Sep 2017 18:51:50 +0200 Original-Received: from localhost ([::1]:36155 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dxyW5-0007g0-A0 for geh-help-gnu-emacs@m.gmane.org; Fri, 29 Sep 2017 12:51:57 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:46188) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dxyVb-0007eU-87 for help-gnu-emacs@gnu.org; Fri, 29 Sep 2017 12:51:28 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dxyVX-0001On-CZ for help-gnu-emacs@gnu.org; Fri, 29 Sep 2017 12:51:27 -0400 Original-Received: from [195.159.176.226] (port=33798 helo=blaine.gmane.org) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dxyVX-0001O8-41 for help-gnu-emacs@gnu.org; Fri, 29 Sep 2017 12:51:23 -0400 Original-Received: from list by blaine.gmane.org with local (Exim 4.84_2) (envelope-from ) id 1dxyVL-0003HN-9p for help-gnu-emacs@gnu.org; Fri, 29 Sep 2017 18:51:11 +0200 X-Injected-Via-Gmane: http://gmane.org/ Original-Lines: 22 Original-X-Complaints-To: usenet@blaine.gmane.org Cancel-Lock: sha1:rSHJ7umaqMjwbDxWaHflZf3DxV8= X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-Received-From: 195.159.176.226 X-BeenThere: help-gnu-emacs@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: Users list for the GNU Emacs text editor List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "help-gnu-emacs" Xref: news.gmane.org gmane.emacs.help:114474 Archived-At: dekkzz78@gmail.com writes: >>Good luck finding many clients that can provide such a set of >>requirements. Most of the projects I deal with in my daytime job have >>to do with clients that cannot even provide _in_formal requirements, >>and depend on me and my team to do that for them. > > Ouch - there's a project doomed from the start. Ever heard of interactive development? I've doing that for the last 20 years and the success ratio is almost 100%. >>> The predominating choice is cheap software. As evidence for this claim I >>> note the very high frequency of bug reports including security >>> vulnerabilities. > > That's more to with poor teaching & understanding of how to code securely. Yes, because there are practical methods that result in guaranteed defect-free software. Sigh.