Preventing attacks.
Tom Kaitchuck <[email protected]> Fri, 14 Oct 2005 16:50:48 -0500
| Newsgroups | gmane.comp.lang.nice.general |
|---|---|
| Message-ID | <[email protected]> |
It seems to me that Nice might be somewhat more vulnerable to attack than java, because it allows overriding of things. See: http://getahead.ltd.uk/blog/joe/2005/09/28/1127890816901.html So it would probably be a good idea to disallow certain practices: Assignment in a Boolean condition. Hex/unicode interpretation inside of comments. Obviously it is good that Nice does Bounds checking and ensures initialization. However reflection, and passing objects to other threads/processes by reference could still be a problem. The last one must be currently addressed in some capacity, otherwise it would not be possible for multiple threads to deal with the same object, where one could assign it to null and the other assumes this does not happen, or tests for it. But I don't know how this is done, so it might be a good idea to make this more user visible. ------------------------------------------------------- This SF.Net email is sponsored by: Power Architecture Resource Center: Free content, downloads, discussions, and more. http://solutions.newsforge.com/ibmarch.tmpl