WebApp Sec mailing list archives
Re: Languages/platforms used for Web apps. Any stats?
From: "Jesse G. Lands" <usedtire () pbembattletech com>
Date: Sun, 26 Jun 2005 10:09:47 -0400
The open source element works both ways, however. For example, if I've implemented an open-source BB system and a new vulnerability is published, at least I can grep the code for vulnerabilities --- and fix them myself if no one else has. With a proprietary solution, on the other hand, I'm stuck thinking either "Gee, I sure hope I'm not vulnerable" or "I hope they send me a patch."
It's been my experience that those who blame security problems on the fact that you can read the source of Open Source products are just sheep of Microsoft. If the actual point would be true then Microsoft would put out very few patches compaired to OpenBSD for example. In the majority of problems I have heard about it is generally the script written by the admins and not the actual language itself. I have noticed more problems in my experience with Java, Javascript or VBS then with PHP. If security was an issue though I would sway more toward CGI/Perl/Python. -- JLands Slackware 10/10.1/Current-Registered Linux User #290053 PGP-ID B22ED102
Attachment:
_bin
Description:
Current thread:
- Languages/platforms used for Web apps. Any stats? Benjamin Livshits (Jun 24)
- RE: Languages/platforms used for Web apps. Any stats? Matt Szubrycht (Jun 24)
- Re: Languages/platforms used for Web apps. Any stats? Mark Susol Ultimate Creative Media (Jun 25)
- Re: Languages/platforms used for Web apps. Any stats? Steve McCullough (Jun 26)
- Re: Languages/platforms used for Web apps. Any stats? Jesse G. Lands (Jun 26)
- Re: Languages/platforms used for Web apps. Any stats? Mamading Ceesay (Jun 26)
- Re: Languages/platforms used for Web apps. Any stats? Mark Susol Ultimate Creative Media (Jun 25)
- RE: Languages/platforms used for Web apps. Any stats? Matt Szubrycht (Jun 24)
- Re: Languages/platforms used for Web apps. Any stats? Andrew van der Stock (Jun 24)
- Re: Languages/platforms used for Web apps. Any stats? focus (Jun 24)
- Re: Languages/platforms used for Web apps. Any stats? Steve McCullough (Jun 26)
- Re: Languages/platforms used for Web apps. Any stats? Rob Lanphier (Jun 25)
- Re: Languages/platforms used for Web apps. Any stats? Gary Warner (Jun 25)
- Re: Languages/platforms used for Web apps. Any stats? prep (Jun 25)
- RE: Languages/platforms used for Web apps. Any stats? Mark Curphey (Jun 25)
- RE: Languages/platforms used for Web apps. Any stats? Steve Slater (Jun 25)
- Re: Languages/platforms used for Web apps. Any stats? Adam Shostack (Jun 25)
- RE: Languages/platforms used for Web apps. Any stats? Mark Curphey (Jun 25)