[techtalk] Eric Raymond, MS security, and open source..

[Kai MacTane]

At 5/14/01 05:52 PM , clburke at fscinternet.com wrote:

>I can't find any references online currently to the MS IIS backdoor ESR
>refers to.  Have any of you heard of the backdoor, or seen security or
>press coverage of it?  It's not on buqtraq or securityfocus or slashdot
>or... yet.

It is on Slashdot, under the headline "Microsoft Admits To Backdoor In IIS 
[updated]". Article at http://slashdot.org/article.pl?sid=01/05/14/1858201, 
which includes a link to the Yahoo! News article that's also referenced by 
ESR's message:

>-----Original Message-----
>From: esr at thyrsus.com [mailto:esr at thyrsus.com]
>Sent: Monday, May 14, 2001 5:43 PM
>To: esr at thyrsus.com; wire-service at thyrsus.com
>Subject: Reliance on closed source for security considered harmful
>
>Today, Yahoo is carrying the news that Microsoft has admitted the
>existence of a back door in its IIS webserver that could affect
>hundreds of thousands of websites worldwide [1].
>[very big snip]
>[1]
><http://smallbusiness.yahoo.com/entrepreneur.html?s=smallbiz/articles/20010 
>514/microsoft_ackno>

That's the same URL the Slashdot story links to.

                                                 --Kai MacTane
----------------------------------------------------------------------
"Doom. Gloom. Angst. Despair. Tragedy."
                                                 --A. Random Goth