Re: woody release task needs help: package priorities
On Tue, May 15, 2001 at 04:00:09PM +0300, Eray Ozkural (exa) wrote:
> I sometimes have the feeling that too much security is breaking many
> convenient features. It would be wrong to put in a program with known
> vulnerabilities, but except that I don't see why you would want to
> remove useful small programs.
Because the vast majority of users probably don't care about all the
possible features (and many don't even know they exist/are active) are
are needlessly exposed to an avoidable security risk. Time and again
we've seen programs, even those originally designed as secure
alternatives, exploited by holes discovered years after they were first
released. The *only* practical way to prevent this is to not run
external services unless they're really required. Unless you care to
come up with a proof of correctness...
Didn't think so.
--
Mike Stone
Reply to: