[sldev] Security Update 2008-10-06 to SL Viewers and source code
- CLARIFICATION
Anders Arnholm
Anders at Arnholm.se
Tue Oct 7 06:44:07 PDT 2008
Ambrosia skrev:
> Um, Gordon.
>
> Rob said 3rd party viewer creators can contact him and ask for the
> source code in advance.
>
> Which will be released to the public tomorrow, so either way tomorrow
> 3rd party coders can patch the fix into the most ancient viewers there
> are.
>
> While I understand the frustration about no immediate availability of
> the fix, this hardly makes any work 'worthless', and what you get is a
> 24 hour delay -if your request does not get approved-.
>
> Seriously, take a breather here. it's not like they're doing the delay
> just to laugh at your face. They're doing it so the majority of SL
> users is potentially protected before the source (and thus an exact
> way to put together attack code) gets released. And, as he said, if
> you maintain a 3rd party viewer, you can apply to get it earlier.
>
To be honest the release note and the vunurable code is what is needed
to make a attack code, the patch for fix it not ac much. It's pretty
clear how to make the code as i said in the forum about this relase, the
holding the code back only makes it take longer till all viewers are
updated. And yes please code now so i can update my Nicholaz build for 1.19.
Maybe I still have time to fix this before sunday.
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the SLDev
mailing list