On Mon, Aug 19, 2013 at 4:34 PM, Matthew Flatt <mfl...@cs.utah.edu> wrote:
>
> Is there a situation where allowing an arbitrary file- or
> directory-existence test would be bad?

This all depends on how paranoid we want to be.  There are certainly
situations when this will be bad -- it lets you determine who else has
an account on a computer, for example.  But there are contexts where
having GC be observable is a security hole as well, so we have to pick
a spot on the continuum.

Sam
_________________________
  Racket Developers list:
  http://lists.racket-lang.org/dev

Reply via email to