[Info-vax] Variable declarations, was: Re: improving EDT

[Stephen Hoffman]

On 2016-11-30 02:59:04 +0000, Arne Vajhj said:

> If you look at the actual list of security updates for commodity OS 
> then you will see that most of them does not relate to the OS core but 
> to all sorts of applications including web browsers, email clients etc..

Ayup.

Not hearing about security problems doesn't make me particularly comfortable.

If folks look at the problem reports on the security lists, y'all'll 
might find that some of those do apply to OpenVMS; whether "just" 
denial-of-service, or otherwise.   There are folks around with lists of 
those sorts of things, too.   Or quite possibly — if the folks are 
inclined to invest a little more effort — with exploits.   NTP is a 
salient example that's had some problems, and where OpenVMS sites have 
been effected.

That's also all without discussing the security notification and patch 
process.  Some other systems have their OpenSSL patches ready either 
with or within days of the announcements, for instance.

I've been impressed by how expeditiously some other systems that get 
their patches, and how easy and fast those patches are to acquire and 
install.



-- 
Pure Personal Opinion | HoffmanLabs LLC