Warning this article may contain opinions of the author that you and iTWire don't necessarily agree with. Don't let them get away with it - have your say with a comment!

No. 1 Story

ACCC clears Optus to scrap HFC network and use NBN instead

The ACCC has cleared, provisionally, the proposed deal between Optus and NBN Co under which Optus is to be paid around $800m to shut down its HFC network and transfer customers onto the NBN. read more

10-second PWN2OWN Safari crack based on a year-old bug

Opinion and Analysis

Yes, someone else might have discovered it independently and used the information for nefarious purposes, but - as far as we know - they didn't. Unless the vulnerability and a corresponding exploit were being used in anything other than extremely focused attacks, we would almost certainly have heard about it.

And if you think Apple should have found the bug for itself by now, take a look at the ZDI's list of upcoming advisories.

The oldest dates back to 2006, yet HP still hasn't come up with a fix.

And there are another 16 - all described as being of high severity - that remain unfixed since 2007. Which companies are involved? America Online, Borland, Computer Associates, Hewlett-Packard, IBM, Microsoft, Oracle, Real Networks and Symantec.

In comparison, the oldest Apple bug on the list was logged in October 2008.

And despite the much-vaunted 'quick fix' capability of the open source community, there are high-severity Firefox bugs of a similar vintage.

It could be that these relatively old vulnerabilities have remained unfixed because the vendors disagree with TippingPoint's assessment of their importance.