On 4/23/05, Jim Davis <[EMAIL PROTECTED]> wrote: > Exactly as I've said before. You should expect compromise when sharing - > it's just that simple.
Yes. > Saying "get a dedicated server" is all well and good but a lot of people > don't have the money. So what can you do with your $20 a month? Right, and for $20 / month I don't believe people should expect the sorts of levels of security being discussed here. Running an ecommerce system that contains customer data and credit card information on a shared host is a helluva risk, in my opinion. I've had a sniff round the application scopes of some shared servers... it's pretty scary how many people seem to think it's OK to cache sensitive customer data in application scope! I think people just need to be aware of the risks when living on a shared host - and remember that these are not really ColdFusion-specific issues. JSP also has a shared application context, for example, and many other technologies allow far more access to the file system than could be considered wise. Security is a big, complex issue and good security typically costs $$$ (if not in purchase costs then in development costs). -- Sean A Corfield -- http://corfield.org/ Team Fusebox -- http://fusebox.org/ Got Gmail? -- I have 50, yes 50, invites to give away! "If you're not annoying somebody, you're not really alive." -- Margaret Atwood ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Discover CFTicket - The leading ColdFusion Help Desk and Trouble Ticket application http://www.houseoffusion.com/banners/view.cfm?bannerid=48 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:204121 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
