On Fri, Feb 11, 2000 at 06:33:17AM +0000, Rick Welykochy wrote:
> [EMAIL PROTECTED] wrote:
>
> > http://linuxtoday.com/stories/16546.html
> > Vulnerability Type: (unlikely) local root compromise
>
> > "The biggest problem in the universe is that nobody helps each other."
> > Anakin Skywalker
>
> Yeah, and the biggest problem with inept programming
> is they don't bounds check memory pointers. <sigh>
>
> Seems like about 95% of these exploits involve buffer
> overflows or memory address compromises. You'd think
> we human beans would learn from this kind of history
> repeating itself for the past 25 years ;)
I believe that they have. I've heard of at least one Linux auditing
project, along the lines of the one OpenBSD completed a year or so
ago. Basically they cleaned up all of the string/buffer handling
code everywhere in the kernel and most of the user-land, replacing
unsafe constructs with safe ones.
Note too that all of the new languages (Java, Eiffel, Modula-3,
dylan) have garbage collection and safe string types, so it won't
happen again. Except that "everyone" is still using C, C++ and
<string.h>.
--
Andrew
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
