Home page logo
/

basics logo Security Basics mailing list archives

RE: CGI security vs ASP security
From: "Kline, Nathan C - CIEP-3" <nckline () bpa gov>
Date: Wed, 16 Apr 2003 09:20:12 -0700


1) I think you would have many real Java developers disagree wholeheartedly on this point, I am not one of them so I 
will not bother.

2) Actually .NET is platform independent, try http://www.go-mono.com/.

3) Your third point is ridiculous, and I won't even bother to address it.  

--Nathan
      



From: Jens Porup [mailto:jens () cyber com au] 
Sent: Tuesday, April 15, 2003 6:35 PM
To: security-basics () securityfocus com
Subject: Re: CGI security vs ASP security

On Tue, Apr 15, 2003 at 11:26:00AM -0700, Kline, Nathan C - CIEP-3 wrote:
<snip> 
The bottom line though is both are dated technologies. Java or .NET,
being cutting edge complied languages will give you much better
performance, scalability, and security then CGI or ASP.

Rubbish. That's Pointy Haired Boss cant and you know it. 

First of all, Java is hardly a "cutting edge compiled language"--it
runs as byte code on the JVM, which is no faster than Perl running
CGI programs using mod_perl and apache. 

Second of all, .Net is not platform-independent. Do you *really* want
to get squeezed by the nuts by Microsoft every year or so for license 
fees? 

Third of all, and most importantly, is developer time. Perl is a
fully-fledged Rapid Application Development language that enables Perl
hackers to produce quality code much faster than their Java or C++
counterparts.

Perl is fast, easily scalable using Object Oriented Perl, and runs
securely on more platforms than Java. 

Jens

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the 
world's premier event for IT and network security experts.  The two-day 
Training features 6 hand-on courses on May 12-13 taught by professionals.  
The two-day Briefings on May 14-15 features 24 top speakers with no vendor 
sales pitches.  Deadline for the best rates is April 25.  Register today to 
ensure your place.  http://www.securityfocus.com/BlackHat-security-basics 
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the 
world's premier event for IT and network security experts.  The two-day 
Training features 6 hand-on courses on May 12-13 taught by professionals.  
The two-day Briefings on May 14-15 features 24 top speakers with no vendor 
sales pitches.  Deadline for the best rates is April 25.  Register today to 
ensure your place.  http://www.securityfocus.com/BlackHat-security-basics 
----------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]