On Sun, Jun 17, 2018 at 10:03:30AM +0100, Tomasz Kłoczko wrote:
> Przemek .. what you mean "this is NOT a serious security issue"?
> Is it possible to be not serious pregnant?
> Something IS security issue or NOT at all. Isn't it?
> There are ONLY TWO possible states in context of security, and there
> is nothing in the middle.

That's demonstrably not true. As the very old saying goes, the safest
computer is disconnected from the Internet, and unplugged, and put in a
box, and that box put in a lead case, and that case taken out to the
middle of the ocean and dropped overboard.


It's not helpful to think about security as an absolute.

> Prioritizing security issues is only possible in context of the RISK.

That's only part of the equation. Practical security has to fairly
assess and balance risk _against requirements_.



-- 
Matthew Miller
<mat...@fedoraproject.org>
Fedora Project Leader
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/NUFGAQZFUBJJ4ZISRTFZIR4H7YT3QDW6/

Reply via email to