[SLL] OSS commerce

[Bill Campbell]

On Sat, Dec 22, 2007, Rob Smith wrote:
>On Dec 22, 2007 12:06 PM, Bill Campbell <bill at celestial.com> wrote:
>> Seeing multiple security holes in the horde group of web products and other
>> php based systems, as well as seeing many security advisories from CERT,
>> SANS, etc.
>
>So you judge the *language* based upon what the developers do with it?
>What about the hundreds of major (root level, full hardware access!)
>security issues with the Linux kernel? Does that mean C is insecure
>and should get the "Anything written in C is likely to have major
>security problems"?

I initially said that was my first impression, and had nothing to do with
the quality of that particular system.

I tend to be suspicious of systems written in some languages as the authors
have choices, and it may reflect the skill level of the developers, and
some languages are more appropriate for specific applications than others.

     It is practically impossible to teach good programming style to
     students that have had prior exposure to BASIC: as potential
     programmers they are mentally mutilated beyond hope of
     regeneration.  -- Dijkstra

Bill
--
INTERNET:   bill at celestial.com  Bill Campbell; Celestial Software LLC
URL: http://www.celestial.com/  PO Box 820; 6641 E. Mercer Way
FAX:            (206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676

Intaxication: Euphoria at getting a refund from the IRS, which lasts until
you realize it was your money to start with.