“Fixing” a bug
Thursday, May 15th, 2008
At the moment you can read a lot about the OpenSSL package in the debian system. It’s a good example that you should always download the original packet from the homepage of the producers. On the blog of Ben Laurie I found a good comment that I want to use because it really hit the nail on the head. If you fix a bug in a application that you don’t really understand you shouldn’t touch the code. Ben Laurie would say never fix a bug you don’t understand!!!
For more details you can read the article Vendors are bad for security on the blog.
More links:
