Don't call it a hole, call it a window

[yesthattom]

"In talking of computer security, we often use the term "hole" to refer to a security flaw. We also say vulnerability or exploit.

Instead of calling it a hole, I suggest calling it a "window." As in "Somebody found a window into ssh" or "They got in through a window left open in Sendmail."

The plural is left as an exercise to the reader."

---Brad Templeton

Comments

[airshipjones.livejournal.com]

I think the problem of this analogy is the loading of the terms. A window is something installed, to look through, which is known to be fragile. A hole is open, which if you don't know it is there, you you can fall into. I think it is really all about intent and awarenes.