1999-06-10-16:39:32 Kunz, Peter:
> for years it was my strong belief, that an AS/400 or even an MVS box was
> unhackable and, thus, the best in ITSEC. Not so.
Indeed. It may be helpful to consider that there's a _very_ strong correlation
between security and simplicity; very very simple systems are either secure or
insecure by design and are likelier to be free of failures of the
implementation to precisely match the design goals. By contrast, very very
complex systems are likely to be riddled with obscure areas where the spec
fails to completely describe the behaviour of the implementation.
Mainframes are the only things still in widespread use that have a more
complex specification than NT.
-Bennett
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
