quote:
Originally posted by ShawnZ
where did he say the messenger service
I did in fact reference it in the original post, but I worded it poorly. This is explained in my second to last post.
And yes, you are correct, I am talking about the theoretical vulnerabilities of the system as a whole. However, I am not talking about them in a specific context (i.e. a specific vulnerability) but rather the possibility that exploitable interfaces (TCP/UDP sockets, direct user input, etc) and sections of code exist within the system.
I feel that at current the FAQ does not accurately represent the reality of software security, and that it needs to be changed to that end.