CyberStretch opened this issue on Sep 05, 2002 ยท 12 posts
CyberStretch posted Sat, 07 September 2002 at 1:36 AM
Attached Link: Content Paradise :-)
Well seeing as how CL is not addressing the issue or clarifying it, in security - as in life - it is always best to err on the side of caution. After all the EGISYS AG PDF, just like most documentation about CP, is vague at best. The link for SourceForge, TTBOMK, is the official "Bug List" for many Open Source projects and states that the bug is still open; hence unfixed at this point. Perhaps the silence ie because CL *does* realize that there is an issue and, rightly so, they are not announcing that a serious flaw that could be exploited exists. However, no response whatsoever to valid concerns gives the impression of avoidance. Days of silence in an electronic world, especially when other posts are being addressed, is akin to being ignored. I am beginning to think that if you ask too many hard questions, you get sent directly to "File 13". There were other questions asked in the linked thread at the beginning that an answer was promised for ("If I find an answer, I will post it to a separate thread."), yet no such thread has been created. Since it is now 3 days later, I guess no response should be expected. However, some of those answers would clarify this issue as well.