From mboxrd@z Thu Jan  1 00:00:00 1970
Path: eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: "Dmitry A. Kazakov" <mailbox@dmitry-kazakov.de>
Newsgroups: fr.comp.lang.ada,comp.lang.ada
Subject: Re: Canal+ crash
Date: Sun, 21 Jul 2024 09:22:06 +0200
Organization: A noiseless patient Spider
Message-ID: <v7icut$654$1@dont-email.me>
References: <e14f8a7c-3306-000d-6d3c-a16839488af9@Strand_in_London.Gov.UK>
 <v7fokv$3ehcr$1@dont-email.me> <v7fpql$3en28$1@dont-email.me>
 <v7fuqu$3fihj$1@dont-email.me> <v7hmrc$3p5q7$8@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Sun, 21 Jul 2024 09:22:06 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="e65d71e4824229d2f452f6602bfcd7bc";
	logging-data="6308"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX1/rQBT125h5veODB3/q0VgYwnReyHyIyF8="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:gMsD89WcTeeRdBM4I6L4ECQsNAs=
Content-Language: en-US
In-Reply-To: <v7hmrc$3p5q7$8@dont-email.me>
Xref: news.eternal-september.org fr.comp.lang.ada:2288 comp.lang.ada:66232
List-Id: <comp.lang.ada>

On 2024-07-21 03:04, Lawrence D'Oliveiro wrote:
> On Sat, 20 Jul 2024 11:08:47 +0200, Dmitry A. Kazakov wrote:
> 
>> On 2024-07-20 09:43, Lawrence D'Oliveiro wrote:
>>
>>> On Sat, 20 Jul 2024 09:23:11 +0200, Dmitry A. Kazakov wrote:
>>>
>>>> It is about the fundamental principle that security cannot be added on
>>>> top of an insecure system.
>>>
>>> Actually, it can. Notice how the Internet itself is horribly insecure,
>>> yet we are capable of running secure applications and protocols on top
>>> of it.
>>
>> Why on earth do we need security updates?
> 
> Because computer systems are complex, and new bugs keep being discovered
> all the time.

This does not make sense. You can create a very complex system out of 
screwdrivers and still each screwdriver would require no update.

Systems consist of computers and computers of software modules. There is 
nothing inherently complex about making a module safe and bug free. 
Security interactions are primitive and 100% functional. There is no 
difficult issues with non-functional stuff like real-time problems. It 
is purely algorithmic while all mathematical complexity of cryptography 
is NOT what gets updated. It is complex only because it was designed as 
a Wood Block Tumbling Game.

>> Do you update your screwdriver each week?
> 
> I don’t depend on my screwdriver to keep my bank account secure.

I don't need a bank account to fasten the screws. Application area is 
irrelevant.

-- 
Regards,
Dmitry A. Kazakov
http://www.dmitry-kazakov.de