Preventing attacks.

Tom Kaitchuck <[email protected]> Fri, 14 Oct 2005 16:50:48 -0500
Newsgroups gmane.comp.lang.nice.general
Message-ID <[email protected]>
It seems to me that Nice might be somewhat more vulnerable to attack than 
java, because it allows overriding of things. See:
http://getahead.ltd.uk/blog/joe/2005/09/28/1127890816901.html

So it would probably be a good idea to disallow certain practices:
Assignment in a Boolean condition.
Hex/unicode interpretation inside of comments.
Obviously it is good that Nice does Bounds checking and ensures 
initialization. 
However reflection, and passing objects to other threads/processes by 
reference could still be a problem.

The last one must be currently addressed in some capacity, otherwise it would 
not be possible for multiple threads to deal with the same object, where one 
could assign it to null and the other assumes this does not happen, or tests 
for it. But I don't know how this is done, so it might be a good idea to make 
this more user visible. 


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl