From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 107f24,582dff0b3f065a52 X-Google-Attributes: gid107f24,public X-Google-Thread: 1014db,582dff0b3f065a52 X-Google-Attributes: gid1014db,public X-Google-Thread: 109fba,582dff0b3f065a52 X-Google-Attributes: gid109fba,public X-Google-Thread: 103376,bc1361a952ec75ca X-Google-Attributes: gid103376,public X-Google-ArrivalTime: 2001-08-02 11:01:33 PST Path: archiver1.google.com!newsfeed.google.com!newsfeed.stanford.edu!news.ems.psu.edu!not-for-mail From: cross@augusta.math.psu.edu (Dan Cross) Newsgroups: comp.lang.ada,comp.lang.c,comp.lang.c++,comp.lang.functional Subject: Re: How Ada could have prevented the Red Code distributed denial of service attack. Date: 2 Aug 2001 14:01:32 -0400 Organization: Mememememememmeme Message-ID: <9kc4hs$afk@augusta.math.psu.edu> References: NNTP-Posting-Host: augusta.math.psu.edu X-Trace: boatanchor.ems.psu.edu 996775293 7995 146.186.132.2 (2 Aug 2001 18:01:33 GMT) X-Complaints-To: security@psu.edu NNTP-Posting-Date: 2 Aug 2001 18:01:33 GMT Xref: archiver1.google.com comp.lang.ada:11113 comp.lang.c:71698 comp.lang.c++:79411 comp.lang.functional:7209 Date: 2001-08-02T18:01:33+00:00 List-Id: In article , Goran Larsson wrote: >The report clearly shows that you can have problematic software in >any language. It was also ironic that it was a compiler generated >range check on a value (that was not going to be used) that was the >event that started the destructive chain of events. The management >decision that any exception had to be due to hardware error (and >warranted a shutdown) was _perhaps_ influenced by the belief that >writing code in Ada resulted in bug free programs. :-) I'm afraid that this is inaccurate (as has already been pointed out), but it also misses the point. No one ever said you couldn't write bad code in Ada, but we did point out that it's easier to write good code in it. A lot of the arguments I've read in this thread in defense of, eg, C, are analogous to the argument, ``Well, my friend died in a car crash even through s/he was wearing a seat-belt, so why should I bother wearing mine?'' One hopes the answer is self-evident. - Dan C.