[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-Disclosure] Off topic programming thread
- To: Bill Royds <full-disclosure@royds.net>
- Subject: Re: [Full-Disclosure] Off topic programming thread
- From: Alexandre Dulaunoy <alexandre.dulaunoy@ael.be>
- Date: Wed, 29 Oct 2003 15:07:38 +0100 (CET)
On Wed, 29 Oct 2003, Bill Royds wrote:
> I agree that one can write secure code in C, but I am saying that C doesn't
> help in writing it.
> Perhaps we need to "deprecate" some C standard library functions and syntax
Various attempts to move to a specific dialect of C exists, I don't
really know the efficiency of that.
http://www.research.att.com/projects/cyclone/
On the other side, an interpreter of C can also be used to check
consistency of the software and reaction inside a 'kind of' vm.
http://root.cern.ch/root/Cint.html
It's only a part of the cake.
Every ingredient are important for the taste of the cake, taste is
security and cake is software.
--
-- Alexandre Dulaunoy (adulau) -- http://www.foo.be/
-- http://pgp.ael.be:11371/pks/lookup?op=get&search=0x44E6CBCD
-- "Knowledge can create problems, it is not through ignorance
-- that we can solve them" Isaac Asimov
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html