Comments on: Flaws could open systems to attack

"Critical" flaws in widely used security authentication technology could expose many software products to hacker attack.

[Anon-Y-mous]

Funny, no vile anti MS posts from Linux zealots!

Could it be because of this quote: "Microsoft also uses Kerberos, but a homegrown version that is not affected by the flaws."

OS X wasn't mentioned either

And it uses Kerebos as well.

I'll take the bait....

....but I'm not a "Linux zealot". In fact, I don't use Linux at all. I do hope that's ok.

As I read the quote with respect to Microsoft, two thoughts came to mind.

First, MicroSoft does skate by some of the security flaws. Statistically, it's bound to happen. The old saying "A stopped clock is still right twice a day" comes to mind.

Second, the fact that MicroSoft uses their own "home grown" version of Kerberos AND by some cosmic quirk they happened to escape these particular flaws, DOES NOT mean that their version is free of flaws.

It's just a matter of time. The table is open....Place your bets

[Anon-Y-mous]

Funny, no vile anti MS posts from Linux zealots!

Could it be because of this quote: "Microsoft also uses Kerberos, but a homegrown version that is not affected by the flaws."

OS X wasn't mentioned either

And it uses Kerebos as well.

I'll take the bait....

....but I'm not a "Linux zealot". In fact, I don't use Linux at all. I do hope that's ok.

As I read the quote with respect to Microsoft, two thoughts came to mind.

First, MicroSoft does skate by some of the security flaws. Statistically, it's bound to happen. The old saying "A stopped clock is still right twice a day" comes to mind.

Second, the fact that MicroSoft uses their own "home grown" version of Kerberos AND by some cosmic quirk they happened to escape these particular flaws, DOES NOT mean that their version is free of flaws.

It's just a matter of time. The table is open....Place your bets

give it up

considering the multiple flawes that have been identified in kerberos over the years of which most have not been in MS implementation as MS when it reviewed the MIT implementation identified many of flawes and were then laughed at and abused for making the changes to there implemetation as they claimed it was better. They have been proven right (there implementation has been out there for over 5 years) but all you will see from people is that "just because they haven't found flawes yet doesn't meant they dont't have any".

give it up

considering the multiple flawes that have been identified in kerberos over the years of which most have not been in MS implementation as MS when it reviewed the MIT implementation identified many of flawes and were then laughed at and abused for making the changes to there implemetation as they claimed it was better. They have been proven right (there implementation has been out there for over 5 years) but all you will see from people is that "just because they haven't found flawes yet doesn't meant they dont't have any".