Re: Languages/platforms used for Web apps. Any stats?

> The open source element works both ways, however. For example, if I've
> implemented an open-source BB system and a new vulnerability is
> published, at least I can grep the code for vulnerabilities --- and fix
> them myself if no one else has. With a proprietary solution, on the
> other hand, I'm stuck thinking either "Gee, I sure hope I'm not
> vulnerable" or "I hope they send me a patch."
 
It's been my experience that those who blame security problems on the fact that 
you can read the source of Open Source products are just sheep of Microsoft.  
If the actual point would be true then Microsoft would put out very few patches 
compaired to OpenBSD for example. 

In the majority of problems I have heard about it is generally the script 
written by the admins and not the actual language itself.  I have noticed more 
problems in my experience with Java, Javascript or VBS then with PHP.  If 
security was an issue though I would sway more toward CGI/Perl/Python.

-- 
JLands
Slackware 10/10.1/Current-Registered Linux User #290053
PGP-ID B22ED102

pgpvyxmlEWYAS.pgp
Description: PGP signature