On Wed, May 26, 2004 at 09:36:52AM -0600, s. keeling wrote:
> Usenix' ;login: had an article recently discussing this sort of
> vulnerability.  If you're letting just anyone at your C compiler, you
> MAY be facilitating exploits.

I suppose any access is more of a security risk.  But if someone can
gain access via a network then it seems like they could also probably
compile a program elsewhere and bring it in also.

> Personally, I'd tend to think that once they're in, all bets are off
> and locking down the C compiler is the least of your problems.

Exactly.

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to