[cap-talk] DJB on Least Privilege

[Jonathan S. Shapiro]

On Mon, 2007-11-05 at 18:45 +0000, Stiegler, Marc D wrote:
> Having said that, how many of the top ten programs you use are less than
> 3 years old, and how many are antiques that just keep getting patched to
> do more stuff more poorly?

Hmm. Actually, quite a lot of the stuff that I use has been
substantially reworked or replaced in the last 3-5 years: evolution,
gnome, firefox.

And there is a second group of stuff where better replacements are
available, but I haven't switched out of inertia and ignorance. qmail
vs. sendmail comes to mind. Also boa vs. apache.

Finally, note that your list is biased toward applications, where for
enterprise customers the low-energy point of entry is probably server
items like web servers, databases, and so forth. Your list is important,
but we should neglect the server side.

shap
-- 
Jonathan S. Shapiro, Ph.D.
Managing Director
The EROS Group, LLC
www.coyotos.org, www.eros-os.org