[Info-vax] DCL vulnerability write up on The Register

[DaveFroble]

terry-groups at glaver.org wrote:
> On Thursday, February 8, 2018 at 12:29:52 PM UTC-5, Stephen Hoffman wrote:
>> HPE transitioned OpenVMS Alpha into mature support — that's HPE-speak 
>> for "no patches" — over a year ago.
> 
> If I were paying HPE for support, I'd really have to question what type of "support" they were providing if they declined to produce a patch for a known CVE, particularly when they seem to know what the fix entails. Perhaps HPE "support" just means access to the library of out-of-date, no-longer updated patches, plus occasional "reading service" to tell the user that something is in the manual? Perhaps they should reduce their support pricing to reflect the reality of the "support" they are providing...

If you were paying HPE for VMS support on Alpha, you'd be an idiot, or worse.  I 
certainly hope nobody fits into this catagory.

-- 
David Froble                       Tel: 724-529-0450
Dave Froble Enterprises, Inc.      E-Mail: davef at tsoft-inc.com
DFE Ultralights, Inc.
170 Grimplin Road
Vanderbilt, PA  15486