Software Security

Imho I think that any software can be hacked into and turned inside-out because as the saying goes "where there is a will, there is a way". No one is the perfect programmer, there will be even like 1-2 bugs that will result in an unauthorized access to a hacker. Your thoughts?

Here's my impersonation of a month (any month):

Security issues have been identified that could allow an attacker to remotely compromise a computer running Internet Explorer and gain control over it. You can help protect your computer by installing this update from Microsoft.

Security issues have been identified that could allow an attacker to remotely compromise a computer running Internet Explorer and gain control over it. You can help protect your computer by installing this update from Microsoft.

Security issues have been identified that could allow an attacker to remotely compromise a computer running Internet Explorer and gain control over it. You can help protect your computer by installing this update from Microsoft.

Security issues have been identified that could allow an attacker to remotely compromise a computer running Internet Explorer and gain control over it. You can help protect your computer by installing this update from Microsoft.

Security issues have been identified that could allow an attacker to remotely compromise a computer running Internet Explorer and gain control over it. You can help protect your computer by installing this update from Microsoft.

Security issues have been identified that could allow an attacker to remotely compromise a computer running Internet Explorer and gain control over it. You can help protect your computer by installing this update from Microsoft.

Short answer: Yes

You can use tools that will protect yourself and pick up on errors. People rarely use these tools. They aren't perfect but for instance if people used java or perl or ruby or python for a lot of code, many buffer overflows wouldn't happen.

>>3

Heh yeah but ultimately the things used for those languages are themselves written in C/C++.  How are we to know the Java VM is bug-free?  Maybe there's a glitch in the Python interpreter that might let you bypass array bounds checking.  Etc.

>>1
Not true. For example this program:
int main(){for(;;)puts("NO U");}doesn't have bugs.


>>3
If people used Java, buffer overflows would be a joke compared to the kind of problems you'd get, mainly development. Things would not get done, and if they ever did, they would suck and fail hard.


>>4
Since when are C/C++ equal to bugs? And do you have any better idea for the Python/Ruby/PHP/Perl/Lua/etc. interpreters?

http://en.wikipedia.org/wiki/Program_verification

(anyone mind explaining this to an average joe and provide some hello-world type examples?)

>>5
while (1) is faster

while(1) is not faster than for(;;)

10 goto 10

>>5
However, your program depends on a complex C or C++ compiler that can be riddled with bugs, given it's size and complexity.  Furthermore, your program will compile on any number of compilers on any number of platforms.  The possibilty of bugs in one of those compilers/linkers/assemblers on whatever platform is staggering.

>>10
That is a bug.

>>12 is a bug

10 SYS 64738
20 PRINT "OH SHI-"

>>6
"Are we building the product right?", i.e., does the product conform to the specifications?

>>13
Wrong. "Is it scalable?" "Is it enterprise enough?" "Does it make use of best practices?" "Could it become an industry standard?" "Is it OO?" "Does it use XML somewhere?" "If it's the web, is it Web 2.0?"

>>14
What are you talking about? Are you on drugs?

>>15
No, just Java.

>>15
These are the professional tests made by certified professional business developers.

MICROSOFT SPY

EXPERT BBCODE SYSTEM (that supports inline parentheses by using
the ^{FORCED INDENTATION OF THE CODE})

$ cat bbsexpr.pl
#!/usr/bin/perl -p0
0while(s#\(([^\s()]+)\s?(((\(\s)|((?<=\s)\))|[^()]+|(?R))*)\)#\[$1]$2\[/$1]#s);s
/\( /(/g;s/ \)/)/g;
$ cat test
(b (i (o (u EXPERT BBCODE SYSTEM ( that supports inline parentheses by using
the (sup FORCED INDENTATION OF THE CODE) )))))
$ cat test | perl bbsexpr.pl
[b][i][o][u]EXPERT BBCODE SYSTEM (that supports inline parentheses by using
the [sup]FORCED INDENTATION OF THE CODE[/sup])[/u][/o][/i][/b]

EXPERT BBCODE SYSTEM (that supports inline parentheses by using
the ^{FORCED INDENTATION OF THE CODE})

$ cat bbsexpr.pl
#!/usr/bin/perl -p0
0while(s#\(([^\s()]+)\s?(((\(\s)|((?<=\s)\))|[^()]+|(?R))*)\)#\[$1]$2\[/$1]#s);s
/\( /(/g;s/ \)/)/g;
$ cat test
(b (i (o (u EXPERT BBCODE SYSTEM)) ( that supports inline parentheses by using
the (sup FORCED INDENTATION OF THE CODE) )))
$ cat test | perl bbsexpr.pl
[b][i][o][u]EXPERT BBCODE SYSTEM[/u][/o] (that supports inline parentheses by using
the [sup]FORCED INDENTATION OF THE CODE[/sup])[/i][/b]

EXPERT BBCODE SYSTEM (that supports parentheses by using
the ^{FORCED INDENTATION OF CODE})

$ cat bbsexpr.pl
#!/usr/bin/perl -p0
0while(s#\(([^\s()]+)\s?(((\(\s)|((?<=\s)\))|[^()]+|(?R))*)\)#\[$1]$2\[/$1]#s);s
/\( /(/g;s/ \)/)/g;
$ cat test
(b (i (o (u EXPERT BBCODE SYSTEM)) ( that supports parentheses by using
the (sup FORCED INDENTATION OF CODE) )))
$ cat test | perl bbsexpr.pl
[b][i][o][u]EXPERT BBCODE SYSTEM[/u][/o] (that supports parentheses by using
the [sup]FORCED INDENTATION OF CODE[/sup])[/i][/b]

Hi, I can spam /prog/ too, you faggot.

Also, smoke weed everyday.

Are you GAY?
Are you a NIGGER?
Are you a GAY NIGGER?

If you answered "Yes" to all of the above questions, then GNAA (GAY NIGGER ASSOCIATION OF AMERICA) might be exactly what you've been looking for!

Bringing /prog/ back to its people
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy
All work and no play makes Jack a dull boy