<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.16587" name=GENERATOR></HEAD>
<BODY text=#000000 bgColor=#ffffff>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=968032801-17122007>The best of all worlds is called
VMS</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=968032801-17122007></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=968032801-17122007><sniff></SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=968032801-17122007></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=968032801-17122007>Villy</SPAN></FONT></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> simh-bounces@trailing-edge.com
[mailto:simh-bounces@trailing-edge.com] <B>On Behalf Of </B>Davis
Johnson<BR><B>Sent:</B> Sunday, December 16, 2007 18:16<BR><B>To:</B>
simh@trailing-edge.com<BR><B>Subject:</B> Re: [Simh] Simh on Windows - long
startup delays and long shutdown delays<BR></FONT><BR></DIV>
<DIV></DIV>Andreas Davour wrote:
<BLOCKQUOTE cite=midPine.LNX.4.64.0712170156010.25158@Psilocybe.Update.UU.SE
type="cite"><PRE wrap="">On Sun, 16 Dec 2007, Villy Madsen wrote:
</PRE>
<BLOCKQUOTE type="cite"><PRE wrap="">I read a nice little article recently. It talked about Security on Multics.
It mentioned that the O/S had been written in PL/I
It also suggested that it was very hard to program a situation in PL/I that
would ALLOW a buffer overflow
and that it was very hard to program a situation in C that would PREVENT a
buffer overflow...
I do use C - mostly to hack SimH and microcontrollers... I feel much
much more secure programming in Pascal (Delphi) or Fortran. At least
they don't assume that I know what I am doing <G>
</PRE></BLOCKQUOTE><PRE wrap=""><!---->
I wouldn't say it's very hard to prevent in C, but it sure isn't helped.
You can do it, and it's easy, but it also takes thought and intention.
Dave is very right about the amount of non-excellent C programmers is a
problem. Putting something like C in their hands is asking for problems.
/andreas
</PRE></BLOCKQUOTE>The same can be said for all the scripting languages that
make it too easy to interpret externally provided data as code. I'ts not hard to
prevent, but it sure isn't helped etc... and exploits are easier to
develop.<BR><BR>Gimmie the best of all worlds. Where do I find
it?<BR></BODY></HTML>