Re: [misc-sec] Re: Ten least secure programs

2003-07-03 Thread Chris Berry
From: Jon Zobrist <[EMAIL PROTECTED]> Along the same lines, if PHP were available for inclusing (being a programming language) couldn't we just cut to the root of the problem and list C? My personal opinion is that the problem with C would be equally represented in any language of that low level,

Re: [misc-sec] RE: Ten least secure programs

2003-07-03 Thread Jon Zobrist
> >I would round out the list with: > > > >7)BIND > > I was going to list that, but I'm sure there are any alternatives. TinyDNS/djbdns/dnscache is one that I use exclusively. Not only is it more secure, but it's easier to run and manage IMHO. Let's not start a discussion about this in depth,

Re: [misc-sec] Re: Ten least secure programs

2003-07-03 Thread Jon Zobrist
Along the same lines, if PHP were available for inclusing (being a programming language) couldn't we just cut to the root of the problem and list C? -Jon On Mon, 2003-06-30 at 18:31, Richard Bennett wrote: > I wouldn't include PHP as a program. Even though it's interpreted it's > essentially the