Message de Juergen Schmidt  date 2007-08-27 18:04 :
Bernard Marcelly wrote:
Message de Mathias Röllig  date 2007-08-20 17:04 :
This sounds good!

In other words: Are we really sure migration to the Wiki is the best
way? I'm uncertain about it.

I agree. The snippet creator should be improved and not killed.
Copy and paste of code from and to a website isn't a good thing.


+1
Using Wiki for coding is a security hazard because any malicious (or even a well intentioned) person may change a working code to a dangerous code. Most users will run the published code without checking it, and checking complex codes is not easy.
i don't think so, if a snippet do something bad, it is quite easy to remove it or fix the problem. The current snippets are not really tested as well.

My point was that, in a Wiki, a working code can change to a non-working or malicious code at any time, since anybody can change the Wiki page. Whereas in the current snippet web site, any change has to be done by the site responsible, after someone has provided an explicit request for change. Even a snippet published in a web forum is more secure than in a Wiki because only the author and the forum moderator can modify the code.

The same remark goes for anything published on any Wiki. You should not blindly trust a Wiki :(

______
Bernard

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to