On Wed, 02 Jul 2003, Tim Greer wrote:

<FLAME WAR SNIPPED>

> 
> > My whole point was that this top ten list was highly subjective and that
> > insecure programs were really in the hands of the beholder /*again my
> > opinion*/.
> 
> In a way, that's correct.  However, in other ways it's not anything that can
> be argued.  If you compare two programs and one is (a quick, lame Perl
> example):

Kudos to the moderator for allowing this war onto the list.  It was
certainly educational (for me) to see this thorny topic argued with
logic.  Especially Tim's use of a code example to demonstrate that
secure vs. insecure can be a matter of *fact* not just *opinion*

> Example A:
> 
> chomp(my $helloworld = shift || '');
> system("echo $helloworld");
> 
> And another is:
> 
> Example B:
> 
> chomp(my $helloworld = shift || '');
> die "Forget it, pal!\n" if $helloworld !~ /^\w+$/;
> system("echo $helloworld");
> 
> Then there's nothing that's left to "opinion".  

<700 LINES OF FLAME WAR SNIPPED>

Thanks to Kelly, Tim, Vic (and Chris)


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------

Reply via email to