"Many eyes" rarely helps; you need to get the right eyes to look at a bug. If you follow vulnerabilities, you'll notice a handful of people find most of the bugs. The main advantage of open source is that the code is available for those eyes to view.

Does OpenVMS still require the byzantine workarounds that were in OpenSSL, or can it compile modern software without substantial changes?

I think part of the problem is that the OpenSSL developers are publishing code paths that they never test; this was tedu@'s original frustration when trying to disable the OpenSSL internal memory management; there was a knob to turn that nobody had tested, and the code was too hard to read to make the bug obvious.

If there's a demand for OpenVMS SSL libraries, they obviously can continue to use OpenSSL, or someone can re-port this new SSL library.

It's kind of funny: I don't think any of these interviews have any responses from their subjects. Ask away! Then forget.

Except Japan had/has that whole "Lost Decade" thing going on. I guess it depends on how you define "economy doing great".

Yes, the SEC did a great job of preventing those frauds from occurring, instead of swooping in after it all fell apart.

I can't wait until Ford starts making hybrid fusion cars. We only have a couple of years to make Mr. Fusion happen.

So, can Dubya resist pushing the big red button? The jolly candylike button?

I stand corrected. I don't recall why I thought that, maybe I listened to the Upgrade Assistant. Is anything missing from the OS with Modern UI disabled? Perhaps low-resolution screens are a feature...

WSUS Offline may solve your problem.

Fits just fine on my EeePC, although I upgraded the memory and drive as soon as I bought it. It actually runs quite well. Win8 won't fit though, as they artificially block installation if you don't have at least 768 pixels high.

I recently hired a security analyst at my company. I had the opposite problem; almost everyone I interviewed worked at larger companies, and only had narrow experience with specific software products. I was looking for (and eventually found) someone who was more of a generalist "hacker" type. I don't really care if you've used X antivirus and Y SIEM for ten years because that's what your boss purchased, I care how you solve problems.

Come back when it lets me undo Slashdot summaries with mipselled words.

They're already paying the lawyers, so the fees are spent either way.

The impression I got from the nissan.com story was that he tried to make a quick buck (when asked for a price, he said "I don't know, $15 million?") and when he realized that made him look bad he turned it around into a victim story.

Don't get me wrong, that doesn't excuse Nissan Motors' behavior. I was considering buying a Nissan Murano in 2005, and chose another brand specifically because of the nissan.com debacle. My wife emailed a copy of the vehicle we purchased instead to their customer service department with an explanation.

Try Microsoft's EMET if you're in a position to do so; it's usually able to block the exploit from working on old Java if you can't upgrade.