full-disclosure - Off topic programming thread

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: alexandre.dulaunoy at ael.be (Alexandre Dulaunoy)
Subject: Off topic programming thread

On Wed, 29 Oct 2003, Bill Royds wrote:

> I agree that one can write secure code in C, but I am saying that C doesn't
> help in writing it.
> Perhaps we need to "deprecate" some C standard library functions and syntax

Various attempts  to move to a  specific dialect of C  exists, I don't
really know the efficiency of that. 

http://www.research.att.com/projects/cyclone/

On  the other side,  an interpreter  of C  can also  be used  to check
consistency of the software and reaction inside a 'kind of' vm. 

http://root.cern.ch/root/Cint.html

It's only a part of the cake. 

Every ingredient  are important  for the taste  of the cake,  taste is
security and cake is software.

-- 
-- 	  	     Alexandre Dulaunoy (adulau) -- http://www.foo.be/
-- 	   http://pgp.ael.be:11371/pks/lookup?op=get&search=0x44E6CBCD
-- 	   "Knowledge can create problems, it is not through ignorance
-- 				  that we can solve them" Isaac Asimov