WebApp Sec mailing list archives

Re: Languages/platforms used for Web apps. Any stats?


From: "Jesse G. Lands" <usedtire () pbembattletech com>
Date: Sun, 26 Jun 2005 10:09:47 -0400

 
The open source element works both ways, however. For example, if I've
implemented an open-source BB system and a new vulnerability is
published, at least I can grep the code for vulnerabilities --- and fix
them myself if no one else has. With a proprietary solution, on the
other hand, I'm stuck thinking either "Gee, I sure hope I'm not
vulnerable" or "I hope they send me a patch."
 
It's been my experience that those who blame security problems on the fact that you can read the source of Open Source 
products are just sheep of Microsoft.  If the actual point would be true then Microsoft would put out very few patches 
compaired to OpenBSD for example. 

In the majority of problems I have heard about it is generally the script written by the admins and not the actual 
language itself.  I have noticed more problems in my experience with Java, Javascript or VBS then with PHP.  If 
security was an issue though I would sway more toward CGI/Perl/Python.

-- 
JLands
Slackware 10/10.1/Current-Registered Linux User #290053
PGP-ID B22ED102

Attachment: _bin
Description:


Current thread: