Web Problem Areas
Complex administration: easy to get wrong.
- It took one site I know of three tries to get even simple access controls correct.
Complex structure
- the servers try to validate source addresses; check passwords; parse file names; implement access restrictions; switch uids (which means they must run as root); etc.