You can't secure what you don't acknowledge.SM

Wednesday, January 16, 2008

So Oracle and Open Source really aren't that secure...?

Chock these up and file 'em away in the I-told-so-you category:

Apparently Oracle's latest security update contains fixes for 27 flaws including SQL injection:
http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci1294080,00.html?track=NL-102&ad=617874&asrc=EM_NLN_2899404&uid=1018924

Oh, and now our Imperial Federal Government has to spend tax dollars that we've earned that prove that open source software is flawed...?:
http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci1289637,00.html?track=NL-102&ad=617852&asrc=EM_NLN_2860161&uid=1018924

The reality is folks, that regardless of the type of software - I don't care what language it's written in, how much money is charged for it, or how in-depth it's been checked for security flaws - it's going to have security flaws uncovered eventually. Adding to it, the more complex software gets the greater the chance of security weaknesses slipping in. And as long as people are involved in writing software...well, the problem is not going to go away.

No comments:

Post a Comment