From: Phillip Gawlowski <cmdjackryan@...>
Date: 2008-05-03T23:35:13+09:00
Subject: Re: RMagick 2.3.0

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

David Scheffel wrote:
|
| Well, I've just checked. In "testing" stage the package version of
| GraphicsMagick includes the last security fixes, while ImageMagick does
| not. After comparing the change logs of both I'd say ImageMagick has
| more vulnerabilities. However since the size of both communities differ,
| one can never tell for sure.

That, and Debian is rather.. slow when incorporating fixed packages
(AFAIK, they didn't provide fixes themselves). However, comparing
vulnerabilities and patches as the only metric how secure a package is,
isn't all there is to security and reliability.

I'd go with support and mind-share within the community, though. If you
aim for a Ruby on Rails app, for example, ImageMagick is pretty much the
only game in town, from what I can see, and that way you aren't totally
on your own with problems. YMMV, though.

| But that's the same with Windows and Linux. And I still tend to say that
| Linux is more reliable. At least it has the better concepts and I did
| hit the boundaries of Windows capabilities quite often in my last job
| working for a leading internet service provider.

Well, UI wise, Linux is the worst off of the big 3 OSes. Dunno about
reliability either, considering that I am struggling with an obscure bug
on Kubuntu 8.04, which freezes my system completely.

Anyway, all hardware sucks, all software sucks.
<http://www.catb.org/jargon/html/A/All-hardware-sucks--all-software-sucks-.html>

| So, I assume strongly that you use ImageMagick at Twitter? Well, if it's
| good enough for the biggest Rails app out there, it can't be that bad, I
| guess.

I don't know what Twitter uses for image processing, and unlike certain
rumo^H^H^H^Htechblogs, I'm not blingly assuming things either. ;)

Another datapoint: prior to your thread I have never heard of
GraphicsMagick before, only ImageMagick. This is more an anecdote than
anything.


- --
Phillip Gawlowski
Twitter: twitter.com/cynicalryan
Blog: http://justarubyist.blogspot.com

~   I'm just very selective about the reality I choose to accept.
~              --- Calvin
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkgceBIACgkQbtAgaoJTgL9j0ACfeB378nWitgpiMDY7J86TkV1s
lSIAn1O60Vd6U9Ay6+itVDPnG9zaYFCu
=i6Ow
-----END PGP SIGNATURE-----