From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,FREEMAIL_FROM autolearn=ham autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103376,85034d1ac78a66eb X-Google-Attributes: gid103376,public X-Google-ArrivalTime: 2002-03-09 22:44:07 PST Path: archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!feed2.news.rcn.net!rcn!netnews.com!xfer02.netnews.com!newsfeed1.cidera.com!Cidera!cyclone1.gnilink.net!spamfinder.gnilink.net!nwrddc02.gnilink.net.POSTED!53ab2750!not-for-mail Message-ID: <3C8B0191.3080705@mail.com> From: Hyman Rosen User-Agent: Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:0.9.8+) Gecko/20020303 X-Accept-Language: en-us, en MIME-Version: 1.0 Newsgroups: comp.lang.ada Subject: Re: Ada Operating System References: <3c77b476.322111671@news.cis.dfn.de> <3C88E0D1.89161C16@despammed.com> <3C8A3999.2000301@earthlink.net> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Date: Sun, 10 Mar 2002 06:44:05 GMT NNTP-Posting-Host: 162.83.250.122 X-Complaints-To: business-support@verizon.com X-Trace: nwrddc02.gnilink.net 1015742645 162.83.250.122 (Sun, 10 Mar 2002 01:44:05 EST) NNTP-Posting-Date: Sun, 10 Mar 2002 01:44:05 EST Xref: archiver1.google.com comp.lang.ada:21009 Date: 2002-03-10T06:44:05+00:00 List-Id: Marin David Condic wrote: > What about "privacy"? Would it be useful if the OS gave you a guarantee > that some app you have can't be blipping your data to some unknown source or > accessing websites without your knowledge/permission? I'm afraid your love for Ada has blinded you to the fact that not all software errors are because of buffer overflow. Many of the errors and vulnerabilities that show up these days are "cross- scripting" errors and the like, where programs execute externally submitted scripting code because they fail to properly validate inputs. This is purely an error of program logic - no automated language checking is going to catch this.