RE: [SC-L] Programming languages -- the "third rail" of secure coding

2004-08-02 Thread ljknews
At 2:25 PM +0930 8/2/04, Nick Lothian wrote: >What features make Ada safer than Java/C#? (I only have limited experience >with Ada but from memory there was nothing that jumps out at me as something >that Java lacks) Quoting from Tucker Taft in http://www.google.com/groups?selm=FD85Lq.Hyp.0.-s%4

RE: [SC-L] Programming languages -- the "third rail" of secure coding

2004-08-02 Thread Nick Lothian
> >Java/C#: Reasonably safe (both provide protection against > buffer overflows, > >are type safe and provide built-in security mechanisms) > >FORTRAN/COBOL: Don't know - my impression is that COBOL is > fairly safe > >Scripting Languages: Depends on the language. Lack of type > safety can be a

RE: [SC-L] Programming languages -- the "third rail" of secure coding

2004-08-01 Thread ljknews
At 1:03 PM +0930 8/1/04, Nick Lothian wrote: >> >IMHO, though, any such effort is pointless. The reality is >> that we're going >> >to be stuck with C/C++, Java, C#, FORTRAN, COBOL, and various >> >interpreted/scripting languages for a very long time. >What are peoples opinions of the language

Re: [SC-L] Programming languages -- the "third rail" of secure coding

2004-08-01 Thread Glenn and Mary Everhart
Jeremy Epstein wrote: Kevin Wall pointed to http://www2.latech.edu/~acm/HelloWorld.shtml as a good source point; several of the languages I programmed in aren't listed (e.g., PL/360, which in many respects was to the IBM 360 as C was to the PDP/11). Throughout the 1970s (and maybe even 1980s) a res

Re: [SC-L] Programming languages -- the "third rail" of secure coding

2004-07-23 Thread Mark Rockman
(e.g. nonconformant) input. Mark Rockman MDRSESCO LLC - Original Message - From: "Michael S Hines" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, July 22, 2004 10:32 Subject: RE: [SC-L] Programming languages -- the "third rail" of secure coding

RE: [SC-L] Programming languages -- the "third rail" of secure coding

2004-07-22 Thread Michael S Hines
Concur this is a 'rabbit trail' not worth pursuing. For those who assisted with the list, thank you. Otherwise, I suggest we return to our regularly scheduled program at this time. Mike Hines --- Michael S Hines [EMAIL PROTECTED]

Re: [SC-L] Programming languages -- the "third rail" of secure coding

2004-07-22 Thread Craig E. Ward
At 1:22 AM -0700 7/21/04, Crispin Cowan wrote: I don't understand the purpose of this list. If it is to list all programming languages, that is hopeless, as there are thousands of programming languages. If it is to list all programming languages with security ambitions, then I'm confused, as cle

Re: [SC-L] Programming languages -- the "third rail" of secure coding

2004-07-21 Thread James Walden
Michael S Hines wrote: I've been compiling a list of programming languages.. Some of which were developed to 'solve' the insecure programming problem. I don't think we've made it yet. If you want a list of all programming languages (or at least around 2500 of them), try this page: http://people

Re: [SC-L] Programming languages -- the "third rail" of secure coding

2004-07-21 Thread Crispin Cowan
I don't understand the purpose of this list. If it is to list all programming languages, that is hopeless, as there are thousands of programming languages. If it is to list all programming languages with security ambitions, then I'm confused, as clearly not all of the languages listed were inte

Re: [SC-L] Programming languages -- the "third rail" of secure coding

2004-07-21 Thread Erik van Konijnenburg
> At 8:17 AM -0500 7/20/04, Michael S Hines wrote: > >I've been compiling a list of programming languages.. Some of which were > >developed to 'solve' the insecure programming problem. I don't think we've > >made it yet. > >My list -- (feel free to add to it). And then there are languages such

Re: [SC-L] Programming languages -- the "third rail" of secure coding

2004-07-21 Thread Mark Rockman
CTED]> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Tuesday, July 20, 2004 11:05 Subject: Re: [SC-L] Programming languages -- the "third rail" of secure coding > "Michael S Hines" <[EMAIL PROTECTED]> wrote: > > > I've been compiling a list o

RE: [SC-L] Programming languages -- the "third rail" of secure coding

2004-07-21 Thread Peter Amey
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > Behalf Of Michael S Hines > Sent: 20 July 2004 14:17 > To: [EMAIL PROTECTED] > Subject: RE: [SC-L] Programming languages -- the "third rail" > of secure > coding

RE: [SC-L] Programming languages -- the "third rail" of secure coding

2004-07-21 Thread Wall, Kevin
der Mouse wrote... [Michael Hines wrote] >> I've been compiling a list of programming languages.. [...] >> My list -- (feel free to add to it). > > 42. BCPL > 43. sh [snip] > 50. Machine code > > I'd also point out that if it's languages you're trying to list, > JavaScript arguably should not ha

RE: [SC-L] Programming languages -- the "third rail" of secure coding

2004-07-21 Thread Nick Lothian
> I'd also point out that if it's languages you're trying to list, > JavaScript arguably should not have a separate entry from Java Yes it should - they are substantially different languages, even if we look at them only syntactically. You could argue that Javascript should be listed as ECMAScri

Re: [SC-L] Programming languages -- the "third rail" of secure coding

2004-07-20 Thread der Mouse
> I've been compiling a list of programming languages.. [...] > My list -- (feel free to add to it). 42. BCPL 43. sh 43. awk 44. FORTRAN 45. TeX 46. Metafont 47. PostScript 48. MUF 49. BLISS 50. Machine code I'd also point out that if it's languages you're trying to list, JavaScript arguably sho

RE: [SC-L] Programming languages -- the "third rail" of secure coding

2004-07-20 Thread ljknews
At 8:17 AM -0500 7/20/04, Michael S Hines wrote: >I've been compiling a list of programming languages.. Some of which were >developed to 'solve' the insecure programming problem. I don't think we've >made it yet. > >Perhaps it's a personnel problem, not a technology problem? > >My list -- (feel

Re: [SC-L] Programming languages -- the "third rail" of secure coding

2004-07-20 Thread Dave Aronson
"Michael S Hines" <[EMAIL PROTECTED]> wrote: > I've been compiling a list of programming languages.. You missed FORTRAN, ICON, REXX, SNOBOL, and the assorted OS-based shell scripting languages (bash/csh/ksh/etc., VMS DCL, DOS .bat, etc.). I've heard of JOVIAL, which I *think* is a programming

RE: [SC-L] Programming languages -- the "third rail" of secure coding

2004-07-20 Thread Michael S Hines
I've been compiling a list of programming languages.. Some of which were developed to 'solve' the insecure programming problem. I don't think we've made it yet. Perhaps it's a personnel problem, not a technology problem? My list -- (feel free to add to it). 1. Assembler 2. C/C++ 3. Pascal