Secure Coding mailing list archives

RE: Origins of Security Problems


From: ljknews <ljknews () mac com>
Date: Sun, 20 Jun 2004 08:48:44 +0100

At 10:11 PM -0700 6/18/04, Alun Jones wrote:

If there is not sufficient security in the protocol, and DECnet may have
enough security, there is certainly not sufficient security in assuming 
that
your fellow network citizens are clever and kind.

There is nothing to _prevent_ an untrained administrator from granting
that privilege to all users (I have seen worse), but there is a damping
effect provided by the fact that behavior _defaults_ to constraining
those users.





Current thread: