full-disclosure - Re: Deprecation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: th.campos at bol.com.br (Thiago Campos)
Subject: Re: Deprecation

Hi

The deprecations is a way of saying "you are in your own for now on". For 
sure it's not a substitution for any security feature, but the problem is 
always the programmer, us or the JDK developers :)

- Thiago

At 18:57 27/10/2003, you wrote:
>Hi,
>
>actually imho the problem is not whether the vulnerable function is
>deprecated when the system has crashed.  The problem is whether Sun employs
>some people who can implement missing null pointer checks in the JDK.
>Deprecation is no security feature at all, good and aware coding in contrast
>is.
>
>Marc
>
>
>--
>
>Never be afraid to try something new. Remember, amateurs built the
>ark; professionals built the Titanic. -- Anonymous
>
>Marc Sch?nefeld Dipl. Wirtsch.-Inf. / Software Developer