PAUSE apparently runs in a chroot jail, so the only folks likely to be bitten by a version string attack would be smoke testers.
Sounds like smoke testers should be running their smoking in a chroot jail, too. Maybe chroot jails need to be easier to set up ...
My criteria for good software:
- Does it work?
- Can someone else come in, make a change, and be reasonably certain no bugs were introduced?