2 ms·
That said, the key for security is to design an app where compromising the server isn't possible. That's simply not possible. There's always an exploit somewhe
by rosser 13y ago
That said, the key for security is to design an app where compromising the server isn't possible.
That's simply not possible. There's always an exploit somewhere. Continually kicking the can of security "upstream" and being confident that your stuff is secure so long as no-one else messes up is naïve and myopic.
- absherwin 13y agoIn that case is it possible to design a secure application? Can you design an application used by real world people that will remain secure even if the infrastructure that controls it is taken over? If a server is taken over, the best one can hope for, is sufficiently layered defenses to limit the immediate gains of the attacker and an alarm to warn users not to trust the application until further notice.