Re: RFC 227 (v1) Extend the window to turn on taint mode

[Chaim Frenkel]

>>>>> "JH" == Jarkko Hietaniemi <[EMAIL PROTECTED]> writes:

>> (Someone remind me, What is the point of -T if not running setuid?)
JH> Being paranoid is never a bad idea because They are always out to get you.

That's fine, but tell me what security breach can be caused by not having
a -T?

The perl code is available to be read. So what can a perl program do
that the black hat couldn't by tweaking the code? The code is running
under the black hat's priviledges and uid.

<chaim>
-- 
Chaim Frenkel                                        Nonlinear Knowledge, Inc.
[EMAIL PROTECTED]                                               +1-718-236-0183