Is Diaspora Secure After The Patches? No. The team is manifestly out of their depth with regards to web application security, and it is almost certainly impossible for them to gather the required expertise and still hit their timetable for public release in a month. You might believe in the powers of OSS to gather experts (or at least folks who have shipped a Rails app, like myself) to Diaspora s banner and ferret out all the issues. You might also believe in magic code-fixing fairies. Personally, I d be praying for the fairies because if Diaspora is dependent on the OSS community their users are screwed . There are, almost certainly, exploits as severe as the above ones left in the app, and there almost certainly will be zero-day attacks by hackers who would like to make the headline news. Facebook Competitor Diaspora Launches; All Users Data Compromised Immediately makes for a smashing headline in the New York Times, wouldn t you say? Include here the disclaimer that I like OSS, think the Diaspora team is really cool, and don t mean to crush their spirits when I say that their code is unprofessional and not ready to be exposed to dedicated attackers any time soon.

Cierto, seguira habiendo bugs, pero no ha habido otra noticia tan seria como esa. Igual, el tiempo dira, por lo pronto, justo por eso lo ponemos en un arenero, cierto?

• Re: La salsa de soya de la seguridad by jergas on Wednesday June 22, @08:04PM

  Cuando que?

  [ Reply to this ]