Re: Comments on PHP security
| From: | Alain Williams | Date: | Thu, 18 Jan 2007 09:52:22 +0000 |
| Subject: | Re: Comments on PHP security | ||
| References: | 1 2 3 4 5 6 7 8 9 10 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-27517@lists.php.net to get a copy of this message | ||
On Thu, Jan 18, 2007 at 01:13:51AM -0800, Stanislav Malyshev wrote:
> >I am with Arnold on this one. Implement a patch that fixes the source of
> >most of
> >the problems, tidy the rest at leisure. Better to get an effective fix
> >quickly
> >than wait forever for perfection.
>
> Security solution can't plug 90% of holes and then leave the rest for
> leisure... Effective fix means fixing all problems, not just 90% of it.
The choice appears to be:
1) Fix for 90% of compromises, wait forever for fix for the last 10%
2) Wait forever for fix for 100% of compromises
I vote (1).
--
Alain Williams
Linux Consultant - Mail systems, Web sites, Networking, Programmer, IT Lecturer.
+44 (0) 787 668 0256 http://www.phcomp.co.uk/
Parliament Hill Computers Ltd. Registration Information: http://www.phcomp.co.uk/contact.php
#include <std_disclaimer.h>