Greg A. Woods said:

>Well it wasn't all their code to begin with, and I suspect a lot of it
>has still not really been properly rewritten.
>
>And there is a _lot_ of it (code that is, in OpenSSH + OpenSSL).  Almost
>all code has bugs, and the more code there is the more bugs there are,
>and the bigger and nastier they usually get.

Except that Theo talks about those 14/7 weeks auditing ALL the code in 
OpenBSD.
-- 
Rick Kelly  rmk@rmkhome.com  www.rmkhome.com