===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.17
retrieving revision 1.18
diff -u -r1.17 -r1.18
--- www/security.html	1998/02/19 22:44:19	1.17
+++ www/security.html	1998/02/19 22:50:12	1.18
@@ -25,14 +25,16 @@
 approaches towards fixing security problems.
 
 <p>
-Like most members of the
+
+Like most readers of the
 <a href=http://www.geek-girl.com/bugtraq/index.html>
-BUGTRAQ mailing list (which rarely sees OpenBSD security reports
-these days :-)</a>,
-we believe in full disclosure of security problems.  We have found
-that the coding of proper fixes to security problems typically only
-requires about 4-5 minutes of coding.  Thus we typically have fixes
-available extremely quickly.
+BUGTRAQ mailing list</a>,
+we believe in full disclosure of security problems.  We believe that
+security information moves very fast in crackers circles.  Our
+experience shows that coding and release of proper security fixes
+typically requires about an hour of work resulting in very fast fix
+turnaround.  Thus we think that full disclosure helps the people who
+really care about security.
 
 <p>
 
@@ -102,7 +104,7 @@
 <hr>
 <font size="-1">
 <em>This site Copyright &copy; 1996, 1997 OpenBSD.</em><br>
-$OpenBSD: security.html,v 1.17 1998/02/19 22:44:19 deraadt Exp $
+$OpenBSD: security.html,v 1.18 1998/02/19 22:50:12 deraadt Exp $
 </font>
 
 </BODY>