Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The design error is that the applications that bind to privileged ports should be privileged as well.

It is correct design to guard ports with privileges. Not every application should be able to write out to any port and read from any port.

The correct approach to security is to have apps granted access to ports manually, as is done with firewalls.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: