Re: CVS access control

[yap_noel]

>[ On Wednesday, September 26, 2001 at 17:01:25 (-0400),
address@hidden wrote: ]
>> Subject: Re: CVS access control
>>
>> By definition, "security" is about preventing malicious "users" from
doing
>> harm.  It's not about avoiding accidents by careless users.  For
example,
>> would you consider a knotted rope tying my door shut to be any sort of
>> security since it avoids accidental openings?
>
>This I must pick a nit with.  :-)
>
>One of the three corner-stones of security is "integrity".  Good
>security not only prevents malicious damage, but also accidental
>damage.

OK, but I wouldn't consider secure a system that only prevents accidental
damage.

Noel




This communication is for informational purposes only.  It is not intended as
an offer or solicitation for the purchase or sale of any financial instrument
or as an official confirmation of any transaction. All market prices, data
and other information are not warranted as to completeness or accuracy and
are subject to change without notice. Any comments or statements made herein
do not necessarily reflect those of J.P. Morgan Chase & Co., its
subsidiaries and affiliates.