-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Anton Karpov wrote:
> Maybe, because in some cases, it just takes a bit more time to 0wn your box
> if it has no compiler installed.
No, not at all. You can't attack a compiler, it's not accessable from
the outside.

The only reason I can think of in regards to not installing a compiler
is a simple one:
If you don't need it, don't install it.
On our webservers, we definetly need no compiler, so it's not installed.

Does that increase security? No.
Apart from the fact that you shouldn't install / run things you don't
need on production systems :)

./Marian
iD8DBQFEV2oOgAq87Uq5FMsRApM+AJ9vCVGvOQdIYu77fLMWkMo66ss6yQCgyoBV
flxd/ClKy6tBfZPpUS/Vmjk=
=XQE9
-----END PGP SIGNATURE-----

Reply via email to