XOM API for Processing XML with Java

[John Cowan <cowan AT ccil.org>]

Jeff Williams scripsit:

> Which was the right answer. You're advocating a "blacklist" kind of
> security which doesn't work. A "positive" or "whitelist" security model
> (where you deny everything and create exceptions for the things you know
> should be allowed) is generally simpler and much more secure. 

All very well, but how is one to convince a suspicious and paranoid
security person that a particular operation *should* be allowed?
The air gap firewall is the safest (and cheapest) of all firewalls.

-- 
But the next day there came no dawn,            John Cowan
and the Grey Company passed on into the         cowan AT ccil.org
darkness of the Storm of Mordor and were        http://www.ccil.org/~cowan
lost to mortal sight; but the Dead
followed them.          --"The Passing of the Grey Company"