Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Python ssl handling could be better...
From: Michael Krymson <krymson () gmail com>
Date: Fri, 4 Mar 2011 09:53:28 -0600

The problem with this discussion is simply one of definition of security.
For some, security is entirely black and white. It is either perfectly
secure or it is not. These are the people who would say telnetd with
authentication is worse/same as telnetd without any authentication. (False
sense of security aside....really?)

On the other hand, there are people who believe in incremental security, or
grey levels of security, where something like a password is at least
somewhat better than none at all.  Where *some* encryption is at least
somewhat better than none at all. These people probably tend to be those
who've actually had jobs in general digital defense...

Unfortunately, one person's level of risk/value/security is not another's,
especially if their definitions are never going to match up.
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]