RE: CGI security vs ASP security

["Kline, Nathan C - CIEP-3" <nckline () bpa gov>]

1) I think you would have many real Java developers disagree wholeheartedly on this point, I am not one of them so I 
will not bother.

2) Actually .NET is platform independent, try http://www.go-mono.com/.

3) Your third point is ridiculous, and I won't even bother to address it.  

--Nathan
      



From: Jens Porup [mailto:jens () cyber com au] 
Sent: Tuesday, April 15, 2003 6:35 PM
To: security-basics () securityfocus com
Subject: Re: CGI security vs ASP security

On Tue, Apr 15, 2003 at 11:26:00AM -0700, Kline, Nathan C - CIEP-3 wrote:
> <snip> 
> The bottom line though is both are dated technologies. Java or .NET,
> being cutting edge complied languages will give you much better
> performance, scalability, and security then CGI or ASP.

Rubbish. That's Pointy Haired Boss cant and you know it. 

First of all, Java is hardly a "cutting edge compiled language"--it
runs as byte code on the JVM, which is no faster than Perl running
CGI programs using mod_perl and apache. 

Second of all, .Net is not platform-independent. Do you *really* want
to get squeezed by the nuts by Microsoft every year or so for license 
fees? 

Third of all, and most importantly, is developer time. Perl is a
fully-fledged Rapid Application Development language that enables Perl
hackers to produce quality code much faster than their Java or C++
counterparts.

Perl is fast, easily scalable using Object Oriented Perl, and runs
securely on more platforms than Java. 

Jens

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the 
world's premier event for IT and network security experts.  The two-day 
Training features 6 hand-on courses on May 12-13 taught by professionals.  
The two-day Briefings on May 14-15 features 24 top speakers with no vendor 
sales pitches.  Deadline for the best rates is April 25.  Register today to 
ensure your place.  http://www.securityfocus.com/BlackHat-security-basics 
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the 
world's premier event for IT and network security experts.  The two-day 
Training features 6 hand-on courses on May 12-13 taught by professionals.  
The two-day Briefings on May 14-15 features 24 top speakers with no vendor 
sales pitches.  Deadline for the best rates is April 25.  Register today to 
ensure your place.  http://www.securityfocus.com/BlackHat-security-basics 
----------------------------------------------------------------------------