Either this is a poor attempt at humor (indicating a naive or dangerous opionated author), or the testing isn't thorough (indicating the author isn't thorough enough to care despite making very bold claims about similar software). Neither lead to very promising conclusions about the quality of the software.
I've read somewhere that, a laboratory has been able to to acheive this level. I'm unable to find the article to back this claim up, however.
(I'm a .NET developer)
if(s[0] == '%' && s[1] == '2' && s[2] == '0') // escaped space?
That can read past the end of the string if it ends in a '%'. The length check is missing. Maybe it's not such a big deal here, and this is only an example, but if the author's examples are this sloppy, and we can't see the actual source code of his server, then it's hard not to generalise.I realise that my writing style can sometimes be seen as abrasive, but I still don't think that I've done a very good job of explaining my surprise that a) GWAN exists at all, or b) people are actually using it..
I spent a whole weekend trying to get my head inside it, and eventually gave up, after wondering what on earth I was doing.
False. Gentoo is all about control and configurability.