On Sun, Dec 23, 2007 at 09:52:14PM +0100, Magnus Hagander wrote:
> My point is that all these other server products have the exact same
> issue. And that they deal with it the exact same we do - pretty much
> leave it up to the guy who configure the server to realize that's just
> how things work.
The problem with that approach is that, in the computer security world,
taking that approach is increasingly regarded as negligent. And pointing
out that others are similarly negligent is not a response.
Note that I am explicitly not subscribing to or disagreeing with that view.
A