Secure Coding mailing list archives

Re: Re: Java sandboxing not used much


From: "Louis Solomon [SteelBytes]" <louis () steelbytes com>
Date: Mon, 15 Mar 2004 17:17:17 +0000


... from MS-DOS) to a UNIX ... Setting everything 777


sad, but very believable.

the opposite sort of silly things also happens ...
eg mysql (for win32) requring it's my.ini to be in either c:\ (yes, root) or 
%windir%  how brain dead is that ?  and the php docs (for win32) says to 
stick all the .dlls in your system folder, and php.ini in %windir% !


what I'm getting at here, is developers who don't know how the OS is best 
used, make a mess when they release their apps, and stick crap in the wrong 
locations.


why do I rant on this point?  because mess like this is a good way to 
confuse people and confusion leads to insecurities.


Louis Solomon
www.steelbytes.com 








Current thread: