Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 13 Feb 1997 07:41:13 +0900 (JST)
From:      Michael Hancock <michaelh@cet.co.jp>
To:        Terry Lambert <terry@lambert.org>
Cc:        dk+@ua.net, snar@lucky.net, freebsd-hackers@freebsd.org
Subject:   Re: Increasing overall security....
Message-ID:  <Pine.SV4.3.95.970213073812.12287A-100000@parkplace.cet.co.jp>
In-Reply-To: <199702121710.KAA00703@phaeton.artisoft.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 12 Feb 1997, Terry Lambert wrote:

> > To play devil's advocate...
> > 
> > 1) It requires assembler which is harder to understand.  Less people are
> > qualified to review it.  Relying on something harder to understand for
> > security is questionable. 
> 
> This is not a "security through obscurity" issue.  The code is hard to
> understand because of the people trying to understand it, not because
> the difficulty in understanding it is one of the intentional effects.

I didn't say it was "security through obscurity".  Look at TIS's FWTK for
the philosophy I'm talking about. 

Mike Hancock




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.SV4.3.95.970213073812.12287A-100000>