Skip to Content.
Sympa Menu

xom-interest - Re: [XOM-interest] XOM-interest Digest, Vol 47, Issue 5

xom-interest AT lists.ibiblio.org

Subject: XOM API for Processing XML with Java

List archive

Chronological Thread  
  • From: John Cowan <cowan AT ccil.org>
  • To: Jeff Williams <jeff.williams AT aspectsecurity.com>
  • Cc: xom-interest AT lists.ibiblio.org
  • Subject: Re: [XOM-interest] XOM-interest Digest, Vol 47, Issue 5
  • Date: Mon, 11 Dec 2006 14:45:45 -0500

Jeff Williams scripsit:

> Which was the right answer. You're advocating a "blacklist" kind of
> security which doesn't work. A "positive" or "whitelist" security model
> (where you deny everything and create exceptions for the things you know
> should be allowed) is generally simpler and much more secure.

All very well, but how is one to convince a suspicious and paranoid
security person that a particular operation *should* be allowed?
The air gap firewall is the safest (and cheapest) of all firewalls.

--
But the next day there came no dawn, John Cowan
and the Grey Company passed on into the cowan AT ccil.org
darkness of the Storm of Mordor and were http://www.ccil.org/~cowan
lost to mortal sight; but the Dead
followed them. --"The Passing of the Grey Company"




Archive powered by MHonArc 2.6.24.

Top of Page