A more fundamental issue..

Jeroen van Drie <[email protected]>
Newsgroups gmane.comp.security.programming
Message-ID <[email protected]>
A more fundamental issue...

As computing become ever more powerful and oop scripting languages ever more 
prevalent and simple, more and more programmers will know less about OS & 
library component  fundamentals. As computing becomes ever more pervasive, 
the security of code in the OS & library components will over the years only 
become more important while becoming the domain of an ever more exclusive 
club (because their members are mainly highly experienced C/C++ programmers). 

While it seems that we'll be stuck with fairly primitive interfaces (keyboard, 
mouse and two dimensional screen) for at least another decade, more intimate 
interfacing such as 3d displays and tacile feedback are on the horizon; the 
sensors and feedback devices some scientists have implanted into living 
tissue are on the radar. These new interfaces have the potential of 
revolutionizing our computing experience. If at this point we were to add the 
convergence of the computing and bio/genetic sciences that seems imminent 
over the next few decades to the mix, the result will most likely be a 
computing experience that is almost as if not more intimate as any level of 
human social intercourse. This century will most likely see advanced, 
intimate human interface technologies introduced, and once they are available 
their benefits will most likely mandate their use. These technologies will 
most likely aim to wire us directly into the computer.

And so we program in ever higher scripting abstractions, we interface ever 
closer to and into our skins and minds, we integrate systems ever closer to 
rely on and reuse of each other. All this is built on increasingly complex 
layers in the OS and in library toolkits. 

As computing becomes ever more pervasive, even intimate, exploits can lead to 
increasing disaster.

Our mode of thinking about security may have kept up to date with the 
requirements but isn't yet really taking the foreseeable evolution and 
convergence of computing and other sciences into account. Computing security 
is becoming a political concern but that concern is still too shallow and 
mainly has to do with issues such as 'bundling', 'sharing' and 'digital 
rights'. The OS and library components are becoming open, public 
infrastructure but the trend is at risk from the current political focus on 
private instead of public ownership protection. 

Security socially is about accountability and transparency. Programmers and 
the politicians now are setting the mold for other sciences to follow. 
Especially the science of genetic and bioengineering requires a much more 
accountable mold before its products can become as ubiquitous as our 
handywork. If we are to see the same lack of security professionalism and a 
similar level of expediency in bioindustries as we see in the software 
industry we have a lot more to fear from vulnerabilities and exploits and 
lack of patches there. Hopefully in the nearby future we have enough OS & 
library knowhow of our own internals so that we can patch something like Sars 
quickly. The need for that knowhow to be "open source" is evident otherwise 
we as a species could be ransom to profiteering.

ps: I've gone through a couple of drafts, don't mean to cry wolf, but we are 
on the eve of our development model spilling over into other sciences that 
increasingly use computing in development and manufacturing. It's a fairly 
alarming trend considering that we as a society seem to spend more media time 
on security issues within our computers than in our biosphere. It's also 
alarming that after so much public scrutiny and debate we are still on the 
religious discourse of good and evil.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.