Linked by Eugenia Loli on Mon 5th Dec 2005 05:39 UTC
General Development Strings - such as command-line arguments, environment variables, and console input - are of special concern in secure programming because they comprise most of the data exchanged between an end user and a software system. This chapter covers the security issues with strings and how you can sidestep them.
Thread beginning with comment 69151
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[4]: Toolkits
by Richard James on Tue 6th Dec 2005 00:24 UTC in reply to "RE[3]: Toolkits"
Richard James
Member since:
2005-07-07

The question isn't whether it works at all, but whether higher-level languages wouldn't work better for them. Especially later on when the project has to be maintained and extended.

For some people C is the only language that will work for their project. Higher level languages are not always a replacement, so harping on about them will not work.

Reply Parent Score: 1

RE[5]: Toolkits
by nimble on Tue 6th Dec 2005 01:03 in reply to "RE[4]: Toolkits"
nimble Member since:
2005-07-06

For some people C is the only language that will work for their project.

You yourself say "some". I'd say "few".

Higher level languages are not always a replacement, so harping on about them will not work.

If you're gonna dismiss my comments as "harping", at least come up with some logical counter-arguments. The fact that a few projects really do require a low-level language doesn't mean that many other projects wouldn't be better served with higher-level languages.

Reply Parent Score: 1