Quote:
Originally Posted by moetheman
Well, how many vulnerabilities do you think would be found in Windows if everyone had access to the source code? Seriously. The very permissions model windows uses is flawed.
From the user's point of view, the inability to see the source code is a security flaw in and of itself.
Now, about programming languages being insecure, I find that it is the programmer's skill that determines whether software is secure, not the language itself, if it were totally a language issue, then Ada would be the only safe language to write applications in, period.
It really is funny that you claim M$FT products are more secure than open source - when was the last time the world witnessed one of the many security disasters we have all seen (do I really need to list them?) in the M$FT camp in relation to FOSS? Seriously man, please enlighten me, because I seriously can't remember the occasion.
If you truly have to constantly watch something like a hawk, you are doing something wrong friend. Software security is not something which you implement by watching over something at all times.
Funny, this is the only board I have ever seen on the web where M$FT products are safe (and powerful) and MAC addresses do not exist, or behave according to the whim of whatever jackass is posting.
Laughable.
|
Your post makes it obvious that what you understand in relation to security and what you think you understand are two different things.
I'm not holding security class today.
If you admin all your boxes and haven't been applying a shitload of updates over the last year to your linux boxes (in reference to watching things like a hawk.) then LOL @ you. I hope you're not storing any credit card data. If you're in a shared hosting environment, you better hope that the hosting provider is doing more than just updating cpanel.
I'm not new to the internet, I know what kind of situation this is. It's kind of like a political debate where one side digs in to argue their point with out really understanding the issue. It doesn't matter what you tell that person, they're still going to try and argue their side. Participating in those kinds of arguments are a big waste of time.
Based on your post it is obvious that you have a very very rudimentary understanding of security and what leads to vulnerabilities. When I made the post above, I was simply stating facts (which you're obviously not interested in, or unable to understand), not trying to get into an "z0mg which OS is bettar!?!?!" flame war.
Quote:
|
Now, about programming languages being insecure, I find that it is the programmer's skill that determines whether software is secure
|
So, the long and short of it is. I'm not here to teach security class and there are some huge gaps in your understanding that would take a lot more time than I'm willing to give in order to fill them in.