Re: [SC-L] SC-L Digest, Vol 6, Issue 56

2010-03-20 Thread ljknews
At 7:56 PM +0200 3/19/10, AK wrote: > It is way easier for attackers to reverse engineer desktop applications > than web applications. Assuming proper server configuration, it is next > to impossible for an attacker to get the server side source code or > compressed form (e.g WARs) for a web appli

Re: [SC-L] SC-L Digest, Vol 6, Issue 56

2010-03-20 Thread AK
> > As soon as a "non-developer" creates code, they are no longer a > "non-developer". By definition, they are now a developer! > > Of course, they may completely lack any kind of knowledge about security. > Just like most developers, I should add. I expect this problem to *increase* > over t

Re: [SC-L] SC-L Digest, Vol 6, Issue 56

2010-03-20 Thread AK
It is way easier for attackers to reverse engineer desktop applications than web applications. Assuming proper server configuration, it is next to impossible for an attacker to get the server side source code or compressed form (e.g WARs) for a web application and proceed with disassembly/decompil