full-disclosure - Re: C initialization of static objects (was: ALERT ALERT ALERT! google under attack ALERT ALERT ALERT!)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: dotho at mordikyn.dynu.com (Dotho)
Subject: Re: C initialization of static objects (was:
 ALERT ALERT ALERT! google under attack ALERT ALERT ALERT!)

> tired, well ;-) I don't think that SSH, Apache or Sendmail should be
> written in C, they do not benefit from any particular language

The problem (as you went on to get into) is quite simply that there are no
othe choices.  For a language to take the place of C it would have to be
fast, widely known or decently easy to learn, have lots of industry
support, be cross arch/platform and "fix" the common mistakes that people
get into with C. <asbestos_gloves_on>  I know of no language  that
comes close to meeting those requirements,with the
possible exception of Ada, and I doubt most people hate themeselves enough
to use Ada.  </asbestos_gloves_on>

The alternative I would suggest is to "fix" C.

--
Dotho