Here, as is not always my wont, I find myself in strong agreement with Paul Gilmartin.
Security via obscurity---Let's not talk about this; it may go away; and we certainly don't want anyone else to know about it---is a delusionary notion in all but the very short term. (There is a case to be made for not talking about some newly discovered security exposure over an interval of a very few days to 1) give oneself time to protect against it and 2) in order not actively to encourage copycats.) A good fix for such an exposure should be robust; if it is not it it must be replaced; and the only way make this determination is to observe, perhaps even encourage further assaults. Fond wishes provide no protection. When Charles Darwin published On the Origin of Species in 1859, the bishop of Worcester's wife was greatly distressed. "Let us hope it is not true," she is said to have remarked, "But if it is, let us pray that it does not become generally known!" John Gilmore, Ashland, MA 01721 - USA ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
