Comments on: Show 011 – An Interview with Dorothy Denning http://www.cigital.com/silver-bullet/show-011/?utm_source=rss&utm_medium=rss&utm_campaign=show-011 Cigital CTO Gary McGraw discusses software security with security gurus. Mon, 31 Oct 2011 00:04:20 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: The Silver Bullet Security Podcast » Blog Archive » Show 039 - An Interview with Matt Blaze http://www.cigital.com/silver-bullet/show-011/#comment-41 The Silver Bullet Security Podcast » Blog Archive » Show 039 - An Interview with Matt Blaze Wed, 17 Jun 2009 21:02:16 +0000 http://www.cigital.com/silverbullet/show-011/#comment-41 [...] Silver Bullet 11: Dorothy Denning [...] [...] Silver Bullet 11: Dorothy Denning [...]

]]> By: The Silver Bullet Security Podcast » Blog Archive » Show 031 - An Interview with Matt Bishop [Cigital] http://www.cigital.com/silver-bullet/show-011/#comment-40 The Silver Bullet Security Podcast » Blog Archive » Show 031 - An Interview with Matt Bishop [Cigital] Mon, 20 Oct 2008 18:33:40 +0000 http://www.cigital.com/silverbullet/show-011/#comment-40 [...] Silver Bullet Security Podcast interview with Dorothy Denning [...] [...] Silver Bullet Security Podcast interview with Dorothy Denning [...]

]]> By: gem http://www.cigital.com/silver-bullet/show-011/#comment-39 gem Wed, 28 Feb 2007 00:45:54 +0000 http://www.cigital.com/silverbullet/show-011/#comment-39 If you have to code to the metal, you can use assembly like we did back when I was a kid. I suppose C is like assembly on steroids, so it will have a place. However, rampant use of C in non-system places is not helping. And there is no excuse for C++ which is the worst piece of unbelievable crap ever foist on the planet as a programming language. Learning to use C in a secure manner is a good idea. (As you probably know, I have spent a decent chunk of my research career working on that kind of thing.) However learning to use C++ in a secure manner is idiocy itself. Just throw out the language. Who me opinions?? gem company www.cigital.com podcast www.cigital.com/silverbullet book www.swsec.com If you have to code to the metal, you can use assembly like we did back when I was a kid. I suppose C is like assembly on steroids, so it will have a place.

However, rampant use of C in non-system places is not helping. And there is no excuse for C++ which is the worst piece of unbelievable crap ever foist on the planet as a programming language.

Learning to use C in a secure manner is a good idea. (As you probably know, I have spent a decent chunk of my research career working on that kind of thing.) However learning to use C++ in a secure manner is idiocy itself. Just throw out the language.

Who me opinions??

gem

company http://www.cigital.com
podcast http://www.cigital.com/silverbullet
book http://www.swsec.com

]]> By: Oleg Zhylin http://www.cigital.com/silver-bullet/show-011/#comment-38 Oleg Zhylin Thu, 22 Feb 2007 01:25:16 +0000 http://www.cigital.com/silverbullet/show-011/#comment-38 I have to disappoint you about C/C++, it will never be gone. If it will no longer be tought in schools we are facing Idiocracy movie (http://www.imdb.com/title/tt0387808/) in software development. Developers must know how to program computers, not software abstractions over them. As to the topic of the podcast, I would like to emphasise again that C/C++ are _system_ languages which were, are, and will be used to program systems cores. And if we want those cores to be secure, we have no other way but to understand how to use the tools properly. I have to disappoint you about C/C++, it will never be gone. If it will no longer be tought in schools we are facing Idiocracy movie (http://www.imdb.com/title/tt0387808/) in software development. Developers must know how to program computers, not software abstractions over them.

As to the topic of the podcast, I would like to emphasise again that C/C++ are _system_ languages which were, are, and will be used to program systems cores. And if we want those cores to be secure, we have no other way but to understand how to use the tools properly.

]]>