|
|
|
|
|
|
|
|
| Re: What software does orafaq run? [message #560935 is a reply to message #560933] |
Tue, 17 July 2012 20:48   |
 |
dragam
Messages: 31
Registered: May 2012
Location: Ireland
|
Member |
|
|
Actually, I don't "understand" the old "Security through Obscurity" routine.
I thought Orafaq was better than that... Mr. Naude should read the works of
Bruce Schneier on that approach. Ridiculous.
Great name for an IT person though, "Naude" 
Thanks anyway and rgs,
Paul...
[EDITED by LF: removed unnecessary quote of the whole previous message]
[Updated on: Wed, 18 July 2012 00:03] by Moderator Report message to a moderator |
|
|
|
|
|
| Re: What software does orafaq run? [message #560956 is a reply to message #560951] |
Wed, 18 July 2012 00:21 |
|
dragam
Messages: 31
Registered: May 2012
Location: Ireland
|
Member |
|
|
Littlefoot wrote on Wed, 18 July 2012 06:02What difference does it make for you, as a forum member? Would your participation improve if you knew that information?
Hi and thanks for your input,
I'm actually quite impressed by the functionality and may have to
implement a problem ticket system using some sort of similar
software - it would be nice to know what system orafaq is based
on as an example of a real-life working system.
I really don't see what the big deal is over having this information
in the public domain - as for the reason for not revealing it being
"security" - that's just lame.
Security through obscurity is completely contrary to IT best practice.
I did mention Schneier, the expert in the IT security area.
This secrecy might make one wonder about what exactly Orafaq is about - who
runs it and for whose benefit? I can understand not freely publishing
admin passwords - they go to those who wish to contribute their time
and have shown themselves worthy by dint of their contributions. BUT,
keeping the actual software that the site is running a secret just
baffles me - there's no point to it. Even Oracle reveal what software
their forums are running, rubbish and all as it is compared to Orafaq! 
Paul...
p.s. just an addendum. If people knew what the site actually ran, then
perhaps there are Orafaq users out there who also have expertise in that
software and could propose enhancements/provide implementation tips/take
on some of the admin - I don't know. Orafaq appears to want to be a
community site and that's great. So why is a community site keeping
non-sensitive details from its participants/members?
[Updated on: Wed, 18 July 2012 00:27] Report message to a moderator |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
] 
Blog
Search
Help
Members
Register
Login
Home
