Linked by Eugenia Loli on Mon 5th Dec 2005 05:39 UTC
General Development Strings - such as command-line arguments, environment variables, and console input - are of special concern in secure programming because they comprise most of the data exchanged between an end user and a software system. This chapter covers the security issues with strings and how you can sidestep them.
Thread beginning with comment 68855
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[3]: Toolkits
by nimble on Mon 5th Dec 2005 09:40 UTC in reply to "RE[2]: Toolkits"
nimble
Member since:
2005-07-06

People write in C because it works for their project

The question isn't whether it works at all, but whether higher-level languages wouldn't work better for them. Especially later on when the project has to be maintained and extended.

not because they have never seen another language before.

..., but because they're most familiar with C and aren't sure about going with something new. Perfectly natural, if regrettable.

Reply Parent Score: 3

RE[4]: Toolkits
by Richard James on Tue 6th Dec 2005 00:24 in reply to "RE[3]: Toolkits"
Richard James Member since:
2005-07-07

The question isn't whether it works at all, but whether higher-level languages wouldn't work better for them. Especially later on when the project has to be maintained and extended.

For some people C is the only language that will work for their project. Higher level languages are not always a replacement, so harping on about them will not work.

Reply Parent Score: 1

RE[5]: Toolkits
by nimble on Tue 6th Dec 2005 01:03 in reply to "RE[4]: Toolkits"
nimble Member since:
2005-07-06

For some people C is the only language that will work for their project.

You yourself say "some". I'd say "few".

Higher level languages are not always a replacement, so harping on about them will not work.

If you're gonna dismiss my comments as "harping", at least come up with some logical counter-arguments. The fact that a few projects really do require a low-level language doesn't mean that many other projects wouldn't be better served with higher-level languages.

Reply Parent Score: 1