Re: [Full-Disclosure] Is Mozilla's "patch" enough?

[Florian Weimer <fw@xxxxxxxxxxxxx>]

* Aviv Raff:

> Security patches shouldn't be overridden unless intended too (i.e
> uninstalled).

This is not standard industry practice.  Especially if a patch might
break previously working configuration, I completely agree that it's
correct.

For most people, having a working system is more important than having
a secure system.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html