Re: Re: Code Red: What security specialist don't mention in warnings(Frank Knobbe)

[daw () mozart cs berkeley edu (David Wagner)]

Predrag Zivic  wrote:
> You were quite right to what the solution should be.
> Prevent is the key word. Not how to deal (although
> that is the part of the issue and the process) but how
> to prevent the problem from happening. 
> As far as I am concerned, proper and fine grained
> access control is a very good prevention solution.

Huh?  Access control has little to do with buggy code.  All the access
control mechanisms in the world don't help if your trusted code has a
buffer overrun vulnerability.  Access control and software assurance
are orthogonal.
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards