=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v retrieving revision 1.101 retrieving revision 1.102 diff -c -r1.101 -r1.102 *** www/security.html 1999/08/13 12:31:11 1.101 --- www/security.html 1999/08/19 06:57:33 1.102 *************** *** 35,41 **** fixing security problems.

Like many readers of the ! BUGTRAQ mailing list, we believe in full disclosure of security problems. Security information moves very fast in cracker circles. On the other hand, --- 35,41 ---- fixing security problems.

Like many readers of the ! BUGTRAQ mailing list, we believe in full disclosure of security problems. Security information moves very fast in cracker circles. On the other hand, *************** *** 71,77 **** have fixed many simple and obvious careless programming errors in code and only months later discovered that the problems were in fact exploitable. (Or, more likely someone on ! BUGTRAQ would report that other operating systems were vulnerable to a `newly discovered problem', and then it would be discovered that OpenBSD had been fixed in a previous release). In other cases we have been saved --- 71,77 ---- have fixed many simple and obvious careless programming errors in code and only months later discovered that the problems were in fact exploitable. (Or, more likely someone on ! BUGTRAQ would report that other operating systems were vulnerable to a `newly discovered problem', and then it would be discovered that OpenBSD had been fixed in a previous release). In other cases we have been saved *************** *** 83,89 **** Our proactive auditing process has really paid off. Statements like ``This problem was fixed in OpenBSD about 6 months ago'' have become commonplace in security forums like ! BUGTRAQ.

The most intense part of our security auditing happened immediately before the OpenBSD 2.0 release and during the 2.0->2.1 transition, --- 83,89 ---- Our proactive auditing process has really paid off. Statements like ``This problem was fixed in OpenBSD about 6 months ago'' have become commonplace in security forums like ! BUGTRAQ.

The most intense part of our security auditing happened immediately before the OpenBSD 2.0 release and during the 2.0->2.1 transition, *************** *** 332,338 **** OpenBSD www@openbsd.org
! $OpenBSD: security.html,v 1.101 1999/08/13 12:31:11 deraadt Exp $ --- 332,338 ---- OpenBSD www@openbsd.org
! $OpenBSD: security.html,v 1.102 1999/08/19 06:57:33 deraadt Exp $