[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: If you could design a $300 homecomputer today, what would you choose?

Subject: Re: If you could design a $300 homecomputer today, what would you choose?
From: pausch@saaf.se (Paul Schlyter)
Date: 6 Aug 2001 17:32:56 +0200
Newsgroups: alt.amiga, comp.sys.amiga.advocacy, comp.sys.amstrad.8bit, comp.sys.apple2, comp.sys.atari.8bit, comp.sys.atari.advocacy, comp.sys.atari.st, comp.sys.cbm, comp.sys.sinclair
Organization: Svensk Amat|rAstronomisk F|rening (SAAF)
References: <9ikva3$ple$1@nereid.worldonline.nl> <9k1cfj$eos$1@venus.itns.co.za> <#GofzWHGBHA.138@cpmsnbbsa07> <6172ee17.0108060623.59586e4f@posting.google.com>
Xref: archiver1.google.com alt.amiga:1743 comp.sys.amiga.advocacy:22854 comp.sys.amstrad.8bit:4067 comp.sys.apple2:12032 comp.sys.atari.8bit:7517 comp.sys.atari.advocacy:834 comp.sys.atari.st:14919 comp.sys.cbm:19609 comp.sys.sinclair:47328

In article <6172ee17.0108060623.59586e4f@posting.google.com>,
Graham <graham@aledrinker.co.uk> wrote:

>> And there are not dozens of known security holes in most Unix/Linux
>> distributions?  Every scanf(),gets(), sprintf(),strcpy in the OS is a
>> potential security hazard.
> 
> Hence you should use the more secure alternatives with length
> parameters to prevent buffer overflows, such as strncpy.

And in particular, scanf(), gets(), sprintf(), strcpy() are not OS
functions but C runtime library functions, and the security holes
within these functions are present in *all* C runtime libraries,
including those running under MS-Windoze....

scanf() in particular is useless for anything but quick'n'dirty
throw-away test programs, and should never be used in a real
application.

-- 
----------------------------------------------------------------
Paul Schlyter,  Swedish Amateur Astronomer's Society (SAAF)
Grev Turegatan 40,  S-114 38 Stockholm,  SWEDEN
e-mail:  pausch at saaf dot se   or    paul.schlyter at ausys dot se
WWW:     http://hotel04.ausys.se/pausch    http://welcome.to/pausch

References:
- If you could design a $300 homecomputer today, what would you choose?
  - From: "T.J.T van Kooten" <thomas@-nospam-worldonline.nl>
- Re: If you could design a $300 homecomputer today, what would you choose?
  - From: Stephen Shaw <xstephenx@apple2.org.za>
- Re: If you could design a $300 homecomputer today, what would you choose?
  - From: "Karl Thomas" <karlt96@nox.nyx.net>
- Re: If you could design a $300 homecomputer today, what would you choose?
  - From: graham@aledrinker.co.uk (Graham)

Prev by Date: Re: Apple's ways
Next by Date: Re: Lucky IIgs find at Computer Fair
Previous by thread: Re: If you could design a $300 homecomputer today, what would you choose?
Next by thread: Re: If you could design a $300 homecomputer today, what would you choose?
Index(es):
- Date
- Thread