comp.lang.ada
 help / color / mirror / Atom feed
From: Dmytry Lavrov <m31415@mail.ru>
Subject: Re: Virus Resistive Software
Date: Mon, 25 Aug 2003 19:55:36 +0400
Date: 2003-08-25T19:55:36+04:00	[thread overview]
Message-ID: <3F4A3178.4F3F@mail.ru> (raw)
In-Reply-To: mailman.7.1061782606.318.comp.lang.ada@ada.eu.org

Robert C. Leif wrote:
> 
> It appears from the latest news reports, that present commercial
> software, particularly email programs, is susceptible to attack by
> viruses. A question with a very big payoff is could software written
> in Ada and perhaps in part in XML be made significantly more virus
> resistant than present commercial software, such as MicrosoftО©╫
> OutlookО©╫? For instance, would the strong type checking of both Ada and
> XML schema help. As a point of information, it is possible to create
> XML schemas that are semantically very similar to Ada type and object
> declarations. Would the use of an Ada protected type with a single
> entry for reading addresses in a user?s phone book be of any help?
> 
> 
> 
> I believe the present practice of providing the source text should
> decrease the vulnerability of the system. However, I hope that this
> discussion can focus on technical feasibility, as opposed to an
> argument about ?free? vs. entrepreneurial software.
> 
> 
> 
> Bob Leif
> 
> Robert C. Leif, Ph.D.
> 
> Email rleif@rleif.com
> 
> 
Heh,don't run viruses.And don't write to code area(EVEN TO JAVA SCRIPT
CODE BY SCRIPT),check for [and stack] overflow,etc.If programm is not
buggy(read:at least stable) it's can't be hacked or infected!.

ADA programs is more stable ==> more defence against everything.
BUT
If ada program will run mashine code,it will be as hackable as C++ are.
Also,if here will be special "codes" (like "029382FormatHardDisc" in
header of mail ;-),it will be hackable .

If i remember correctly,virus attack(if user does not run virus) called
worm attack.
If this attack is possible,it's mean software bug.Only Bug.It's not
about viruses,it's about bugs.
If prog causes reboots sometimes,it's mean that this prog can
be(read:WILL BE) hacked (heh,if F22 need reboots,it's mean that possible
to send a signal that will cause this reboot,and mean that possible to
control plane remotely via hack!).

Main problem of outlook(and IE) that outlook by default does RUN
code(and does not ask user) for target processor if idiotic
"sertificate" are right. MS sells sertificates to access your
computer(ex.to spy email addresses for spamming)!
----------------
For example,if i'm sorts data via quicksort,in c++ or ada,with special
input it's possible to cause stack overflow!also if heap model are
bad,it's possible to fragment all heap.

There are _too_many_ things called by one word:"hack"
0: Changing program(game) to work W/O disk in CD ;-).
1: decoding publically avaliable encrypted data.(why it's
outlawed???Everyone can do what he want in his head or on his paper ,why
not on computer???)
2: Composing encoded,verified message if you shouldn't compose this
message.
3: Sending something that causes bad things to non-your
computer(including 2). 
3b:Sending a message that causes bad things on many computers.
And there are outlawed so called "unauthorised access to computer".
What's they mean  by this STRANGE words? Who authorises access? What is
access?What is "authorised access"?
(i'm is not a native english speaker,but russian version of this laws
are as strange)
 No one know! No explanations!(except trivial:"unauthorised access to
computer is a unauthorised access to computer")

By laws,if your computer have virus and virus are self-copying,YOU are
OUTLAWED.

Why computer communications need new laws? Federal Laws shouldn't be
changed so frequently.Heh,_first_time_in_history_after_money_ new laws
added for new tool(cars  not about it:there still be good-old laws about
murdering,no new laws ;-)

Instead of spending money to lawyers,let's make software more STABLE.
Program is a only set of well-defined laws for computer.If these laws
ALLOW hack,there will be a hack.
Thanks God,first virus was written before "internet age".

Hackable/infectable progs is a problem of fool with a tool.With better
tool(ada) fool is a same fool.Maybe results of fool's work are better
with ada.



       reply	other threads:[~2003-08-25 15:55 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <mailman.7.1061782606.318.comp.lang.ada@ada.eu.org>
2003-08-25 15:55 ` Dmytry Lavrov [this message]
2003-08-25 19:29 ` Virus Resistive Software Jeffrey Carter
2003-08-26  9:32   ` Preben Randhol
2003-08-26 19:15   ` chris
2003-08-27  3:47     ` Wes Groleau
2003-08-27 19:53   ` Virus Resistive Software (talk about Ada Advocacy) James A. Krzyzanowski
2003-09-04  0:51     ` Randy Brukardt
2003-08-28  5:56 ` Virus Resistive Software Bobby D. Bryant
replies disabled

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox