Mr Budney's bug appears to have been an operating system flaw. As he's suggested, I could merely have told my customers to use an OS without the flaw. I didn't - I chose to provide a workaround, aware that many of my users don't have the choice. I don't believe so. Which would be somewhat difficult for an FTP server.
Complete security is a fallacy, a myth.
If you cling to the hope of complete security, then you are deluding yourself. That's all a matter of your personal perspective, I guess. I am in the habit of asking for people to provide sufficient information for me to take action on their bug reports. E-Soft Inc. All rights reserved.