While reading this thread, I had to wonder. Many of the vulnerablities listed require use of older code for the products listed as they get updated rather rapidly, and the base distro being something along the lines of pre kernel 2.0.
I think your trying to make a very valid point in your article, however with such blaring generalities and a swath of paranoia based on currently unused code you kinda miss putting out what your actualy trying to state.
When a reader has to throw out half an article to make it valuable perhaps not enough research was used in making it. Please consider re-writing the article because what you are trying to say needs to be said no matter how popular it is.

IMHO it all comes down to the hubris of a coder and not the language they use. Why use an optimizing code base like C or C++? Because when I run my email client I want to be able to run other tasks as well. Outlook, An appliction writtin in a combination of languages takes up between 1 and 30% of my resources depending on how active it gets, Nice application on my windows machine but it turns my very expensive high powered lots a memory system into an email kiosk if It desires to. This is a description to show that there are more things to consider than if it works or not but how well it works. Code control is something the Coder needs to take into hand and throwing out unsecured facts just gives us more problems and less solutions.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/150/18863#18863