Re: [Lit.] Buffer overruns

From: infobahn (infobahn_at_btinternet.com)
Date: 01/14/05 

Date: Fri, 14 Jan 2005 06:00:04 +0000 (UTC)

Bryan Olson wrote:
>
> infobahn wrote:
> > And FWIW, I agree entirely. Get the spec right, get the program
> > right, and wave bye-bye to buffer attacks.
>
> How do you know when to give the wave?

At about the same time that you gain *complete* assurance that
automatic bounds-checking (ABC hereafter) doesn't leave you open
to buffer attacks.

ABC adds overhead, so it had better be able to pay its way. So
we'd better be SURE that it works. But how can we be? Even if you
validate your ABC compiler's source code, you have to use a
compiler to compile it. Are you sure there are no mistakes in the
binary? And see ken's "Reflections on Trusting Trust" for the
security issues.

And validating your ABC compiler's source code does not mean that
/my/ ABC compiler's source code has been validated. So you can
write what you think to be a safe program, but the act of letting
that program out of your safe-house (so to speak) means it can no
longer be considered safe.

Absolute security is impossible if you also want to get anything
done. That doesn't mean we shouldn't try for security, of course.
But it's a fair indication that we should do the best job we can
with the best tools available, and what "best" means depends on
circumstances. In cases where speed is vital (and such cases
still remain) and portability is desirable, C still remains the
language of choice for many of us, /even though/ it can be misused
by some programmers to produce low-quality code.

Relevant Pages

  • Re: Create restricted user account, 2003 server AD domain
    ... I originally created the security group 'def' as a domain local group. ... Note that user 'abc' is NOT listed as a member of the domain local group ... I verified this on both the domain server and the XP hosts ...
    (microsoft.public.windows.server.security)
  • Re: Bank Exploit
    ... Have ABC acknowledge that you, as a security professional, are NOT legally bound to divulging into to EFG. ... If company EFG is a client of company ABC, ...
    (Security-Basics)
  • Null: anyaddress
    ... abc, AABB, Xab ... Security Note: When a nym book is run the Nym Book ... If a decryption file or folder is specified, when JBN decrypts a ... 100% cellpadding5 WHITE FORECOLORBLACK ...
    (sci.crypt)
  • Re: [Lit.] Buffer overruns
    ... >> ABC adds overhead, so it had better be able to pay its way. ... >> compiler to compile it. ... That doesn't mean we shouldn't try for security, ... Unfortunately we also have antique programmers ...
    (sci.crypt)
  • Re: In memory row selection
    ... a different position in the source code than where they are first used if ... declaration and first access are within the same execution context. ... var i = 'abc'; ... // we want i to have value 'abc' here ...
    (comp.lang.javascript)
Quantcast