Simplified diff. Full stop and standard unidirectional quotation marks. Rob
Index: security.html =================================================================== RCS file: /cvs/www/security.html,v retrieving revision 1.422 diff -u -p -r1.422 security.html --- security.html 2 Jul 2015 05:49:04 -0000 1.422 +++ security.html 14 Sep 2015 03:25:38 -0000 @@ -112,7 +112,7 @@ skills.<p> Some members of our security auditing team worked for Secure Networks, the company that made the industry's premier network security scanning software package Ballista (Secure Networks got purchased by Network -Associates, Ballista got renamed to Cybercop Scanner, and well...) +Associates, Ballista got renamed to Cybercop Scanner, and well...). That company did a lot of security research, and thus fit in well with the OpenBSD stance. OpenBSD passed Ballista's tests with flying colours since day 1.<p> @@ -126,8 +126,8 @@ have fixed many simple and obvious carel and only months later discovered that the problems were in fact exploitable. (Or, more likely someone on <a href="http://online.securityfocus.com/archive/1">BUGTRAQ</a> -would report that other operating systems were vulnerable to a `newly -discovered problem', and then it would be discovered that OpenBSD had +would report that other operating systems were vulnerable to a "newly +discovered problem", and then it would be discovered that OpenBSD had been fixed in a previous release). In other cases we have been saved from full exploitability of complex step-by-step attacks because we had fixed one of the intermediate steps. An example of where we @@ -165,7 +165,7 @@ written somewhere, but perhaps not taken <li><h3><font color="#e00000">The Reward</font></h3><p> Our proactive auditing process has really paid off. Statements like -``This problem was fixed in OpenBSD about 6 months ago'' have become +"This problem was fixed in OpenBSD about 6 months ago" have become commonplace in security forums like <a href="http://online.securityfocus.com/archive/1">BUGTRAQ</a>.<p>