Re: Need a compelling argument to use Django instead of Rails



Jaroslaw Zabiello wrote:
On Wed, 26 Jul 2006 18:20:44 +0200, Bruno Desthuilliers wrote:

[Quoting JZ...]

Ruby
has nice security system (private, protected, public scopes for methods and
attributes,

This is not "security", this is data-hiding.

No. Data hiding are in Python. Ruby uses security similiar to Java. If the
class has method marked as private it cannot be used in children classes.

Can you please stop using the term security in a vague way whilst
pointing the finger at Java? Sure, Python doesn't really have the
"security" you refer to, apart from elementary protection using
name-mangling (which is mostly good enough) for double-underscore
attributes, but mentioning "Java" and "security" in the same sentence
whilst only really referring to private/protected/public/final is
misleading: Java has an entire spectrum of security features that are
found neither in Python nor Ruby.

[...]

Python has no security at all. I has only convention and mangling. Of
course somebode can say, it is enough, and maybe it is. But I think, that
this might be another reason why Java guys prefer Ruby to Python.

Whatever "no security" means, and I ask you to choose your terminology
more carefully, both Ruby and Python have some way to go before
supporting most of Java's more useful security features. Certainly, the
Java guys can't be flocking to Ruby specifically because it lacks
bytecode verification and a fairly mature sandboxing mechanism.

Paul

.



Relevant Pages

  • SSRT4871 Rev.0 Untrusted applets in Java Plugin may allow unauthorized privileges on HP-UX
    ... The information in this Security bulletin should be acted upon ... Potential vulnerabilities have been identified with the Java ... Plug-In on HP-UX which may allow untrusted applets to escalate ...
    (comp.sys.hp.hpux)
  • SSRT4871 Rev.0 Untrusted applets in Java Plugin may allow unauthorized privileges on HP-UX
    ... The information in this Security bulletin should be acted upon ... Potential vulnerabilities have been identified with the Java ... Plug-In on HP-UX which may allow untrusted applets to escalate ...
    (comp.security.misc)
  • SSRT4871 Rev.0 Untrusted applets in Java Plugin may allow unauthorized privileges on HP-UX
    ... The information in this Security bulletin should be acted upon ... Potential vulnerabilities have been identified with the Java ... Plug-In on HP-UX which may allow untrusted applets to escalate ...
    (comp.security.unix)
  • Ruby Security?
    ... I'm just coming over from Java and am wondering about Ruby security compared to ... What about Ruby? ... as agressive as Java's isolation from the OS. ...
    (comp.lang.ruby)
  • Re: Java programmer lured back by .Net (Questions)
    ... I have finally decided to put all my business logic in C++ and compile that to native code. ... Security is the only reason why I could see that being a problem but I'm sure there is a way around it. ... Of course it learned a lot from Java, and improved upon many things which Java is slowly catching up on. ... I would like to be able to place my executable on my remote server and then "load" the executables on demand from accross the internet - so that there are no executables on the local machine for prying eyes to reverse engineer. ...
    (microsoft.public.dotnet.distributed_apps)