Secruit should depend on the impact [LWN.net]

Secruit should depend on the impact

Posted May 10, 2008 15:42 UTC (Sat) by dvdeug (subscriber, #10998)
In reply to: Secruit should depend on the impact by dps
Parent article: Cryptographic splicing makes for a Wordpress vulnerability

It seems like foolish economy to not worry about doing things right when the cost of doing
things right is cheap. As for LWN, that's assuming that none of the administrator groups have
magic powers, and it's also assuming that the cost of letting people masquerade as other
people is minimal, which it arguably isn't.

(Log in to post comments)