RE: system security (was: symbolize roles)

[Bruce Byfield <bbyfield -at- axionet -dot- com>]

On Tue, 2005-06-28 at 10:43 -0400, Jason Willebeek-LeMair (jlemair)
wrote:

> Just because security through obscurity is a bad idea does not mean you
> have to reveal everything.  You just have to realize that concealing
> capabilities is not the same as securing them.

Which was exactly my point. I wasn't responding to your original post,
but to another poster, who seemed to think that mentioning other
capacities would raise security issues.

Anyway, security aside, what is wrong with letting people know that
software has capacities that they're not using? Either people won't
care, or they'll nose around and learn about the other capacities anyway
in the normal course of their work.

My experience is that trying to conceal functionality is a waste of
time, but that a few users always appreciate knowing more than they
strictly need to.
-- 
Bruce Byfield 604-421-7177
http://members.axion.net/~bbyfield

"Inspiration and craft plus time and effort minus fear and doubt
multiplied by purpose equals song."
- Ray Wylie Hubbard.


^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Now Shipping -- WebWorks ePublisher Pro for Word! Easily create online
Help. And online anything else. Redesigned interface with a new
project-based workflow. Try it today! http://www.webworks.com/techwr-l

Doc-To-Help 2005 now has RoboHelp Converter and HTML Source: Author 
content and configure Help in MS Word or any HTML editor. No 
proprietary editor! *August release. http://www.componentone.com/TECHWRL/DocToHelp2005

---
You are currently subscribed to techwr-l as:
archiver -at- techwr-l -dot- com
To unsubscribe send a blank email to leave-techwr-l-obscured -at- lists -dot- techwr-l -dot- com
Send administrative questions to lisa -at- techwr-l -dot- com -dot-  Visit
http://www.techwr-l.com/techwhirl/ for more resources and info.