From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 107f24,582dff0b3f065a52 X-Google-Attributes: gid107f24,public X-Google-Thread: 109fba,582dff0b3f065a52 X-Google-Attributes: gid109fba,public X-Google-Thread: 103376,bc1361a952ec75ca X-Google-Attributes: gid103376,public X-Google-Thread: 1014db,582dff0b3f065a52 X-Google-Attributes: gid1014db,public X-Google-ArrivalTime: 2001-08-07 07:35:41 PST Path: archiver1.google.com!newsfeed.google.com!newsfeed.stanford.edu!newsfeeds.belnet.be!news.belnet.be!news.tele.dk!small.news.tele.dk!213.204.128.162!news000.worldonline.se!newsfeed01.nntp.se.dataphone.net!nntp.se.dataphone.net!news.kolumbus.fi!nntp.inet.fi!inet.fi!news.lmf.ericsson.se!not-for-mail From: Attila Feher Newsgroups: comp.lang.ada,comp.lang.c,comp.lang.c++,comp.lang.functional Subject: Re: How Ada could have prevented the Red Code distributed denial of service attack. Date: Tue, 07 Aug 2001 17:34:58 +0300 Organization: Oy L M Ericsson Ab Message-ID: <3B6FFC92.C252D0F2@lmf.ericsson.se> References: <3B6555ED.9B0B0420@sneakemail.com> <87n15lxzzv.fsf@deneb.enyo.de> <3B672322.B5EA1B66@home.com> NNTP-Posting-Host: spa2ws50.lmf.ericsson.se Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Trace: ronto.lmf.ericsson.se 997194898 28217 131.160.42.71 (7 Aug 2001 14:34:58 GMT) X-Complaints-To: newsmaster@lmf.ericsson.se NNTP-Posting-Date: 7 Aug 2001 14:34:58 GMT X-Mailer: Mozilla 4.77 [en] (X11; U; SunOS 5.6 sun4u) X-Accept-Language: hu, en Xref: archiver1.google.com comp.lang.ada:11502 comp.lang.c:72688 comp.lang.c++:80642 comp.lang.functional:7381 Date: 2001-08-07T14:34:58+00:00 List-Id: raj wrote: [SNIP] > The buffer overflow occurs because of an old and well known bug in the > C libraries. > Using Ada or another modern language like Ocaml or Mozart could have > prevented this, thus stopping the worm before it infected the very > first IIS server. Just one _short_ comment to this over-discussed thread: C/C++ are power tools. They need professionals to work with them securely. I am very sure that lame programmers can do lame things in Ada as well. Point is: as you don't give a chainsaw to a debil and then complain about the damage... the same way one should use or make use of powerful languages like C and C++. It is not the chainsaw and not C or C++. It is the people using it. A