Re: Why does Windows allow Worms?
From: Alun Jones [MS MVP - Security] (alun_at_texis.invalid)
Date: 05/18/04
- Next message: Alun Jones [MS MVP - Security]: "Re: Why does Windows allow Worms?"
- Previous message: Alun Jones [MS MVP - Security]: "Re: Why does Windows allow Worms?"
- In reply to: Bruce Barnett: "Re: Why does Windows allow Worms?"
- Next in thread: Bruce Barnett: "Re: Why does Windows allow Worms?"
- Reply: Bruce Barnett: "Re: Why does Windows allow Worms?"
- Reply: Bruce Barnett: "Re: Why does Windows allow Worms?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 18 May 2004 14:28:32 GMT
In article <c7eoi9$9ld$0@208.20.133.66>, Bruce Barnett
<spamhater95+U040506204844@grymoire.com> wrote:
>A good system understands the difference between code and data,
>expecially if data comes from an outside source.
There is no such difference. Data is nothing more than instructions to code
on how to execute, what branches to follow, what functions to call. In the
simplest of cases (say, a text editor), there are only a few branches that
data can affect. In the most complex of cases (say, a Perl script, or a
VBScript) there are multiple branches, and the line between data and code,
if there ever was one, has obviously been crossed.
But no, you can't make a difference between code and data. As soon as you
operate on the data anything more sophisticated than "data comes in, data
goes out"', as soon as you _process_ that data, you are allowing the data to
control your code. There are no well-defined edges between code and data.
Alun.
~~~~
[Please don't email posters, if a Usenet response is appropriate.]
-- Texas Imperial Software | Find us at http://www.wftpd.com or email 1602 Harvest Moon Place | alun@texis.com. Cedar Park TX 78613-1419 | WFTPD, WFTPD Pro are Windows FTP servers. Fax/Voice +1(512)258-9858 | Try our NEW client software, WFTPD Explorer.
- Next message: Alun Jones [MS MVP - Security]: "Re: Why does Windows allow Worms?"
- Previous message: Alun Jones [MS MVP - Security]: "Re: Why does Windows allow Worms?"
- In reply to: Bruce Barnett: "Re: Why does Windows allow Worms?"
- Next in thread: Bruce Barnett: "Re: Why does Windows allow Worms?"
- Reply: Bruce Barnett: "Re: Why does Windows allow Worms?"
- Reply: Bruce Barnett: "Re: Why does Windows allow Worms?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
