[Typo3-dev] Typo3 security

[Suman Debnath]

We are in the process of implementing a CMS for a Telecom operator, and we are recommending Typo3. IBM at some level is going to be involved in the choice of the CMS, and currently they have been implementing 'Interwoven', with mixed results from the users (we are not sure if this is because of normal user behaviour - from the minimal interaction we have had; - or whether this is a genuine Interwoven issue; or simply an Interwoven implementation issue).

We are taking up with IBM the implementation of Typo3 by Dassault System (www.3ds.com). 

There are some concerns which are being expressed - primarily on "Security". There are concerns on "malafied hacking" - using Typo3's undiscovered 'Security holes' (if any) to vandalise and illegaly break into the Telecom company's systems. Should we or the client or IBM be concerned about this at all?

Could you help? If this implementation goes through well, it will be great for Typo3 in India (and a Case Study, somewhere in the category of 3ds.com), and therefore, need some expert advise from the gurus.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.typo3.org/pipermail/typo3-dev/attachments/20041220/7a67487e/attachment.htm>