Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 15 Mar 2023 10:40:35 +0100
From: Hanno Böck <hanno@...eck.de>
To: oss-security@...ts.openwall.com
Subject: Re: TTY pushback vulnerabilities / TIOCSTI

On Wed, 15 Mar 2023 20:03:11 +1100 (EST)
Dave Horsfall <dave@...sfall.org> wrote:

> I hate tossing out functionality; would you not make it a privileged 
> operation instead?

From a security perspective tossing out functionality is the better
option compared to restricting access. If there is practically no use
of that functionality and it's mostly a security risk, then removing it
is the right choice.

Reducing complexity is a good principle for IT security.

-- 
Hanno Böck
https://hboeck.de/

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.