I think that the most important (and also most overlooked) point made by Berstein is that complexity is the enemy of security. Only simple enough systems can be made secure. Sandboxing may help sometimes, but is just a ban-aid. What we need is simpler systems that we can write without bugs.
Posted Feb 11, 2010 9:22 UTC (Thu) by renox (subscriber, #23785)
[Link]
>What we need is simpler systems that we can write without bugs.
Need? For security perhaps but history has shown that ,as time goes by, we use systems which have more and more features which is hard to reconciliate with the need for simpler systems..