Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 17 submissions in the queue.

Submission Preview

Link to Story

Imposing Security by Automated Inspectors

Accepted submission by AnonTechie at 2014-06-05 09:23:22
Security
Computer programmers won't stop making dangerous errors on their own. It's time they adopted an idea that makes the physical world safer.
Three computer bugs this year exposed passwords, e-mails, financial data, and other kinds of sensitive information connected to potentially billions of people. The flaws cropped up in different places-the software running on Web servers, iPhones, the Windows operating system — but they all had the same root cause: careless mistakes by programmers.

Each of these bugs — the "Heartbleed" bug in a program called OpenSSL, the "goto fail" bug in Apple's operating systems, and a so-called "zero-day exploit" discovered in Microsoft's Internet Explorer-was created years ago by programmers writing in C, a language known for its power, its expressiveness, and the ease with which it leads programmers to make all manner of errors. Using C to write critical Internet software is like using a spring-loaded razor to open boxes-it's really cool until you slice your fingers.

http://www.technologyreview.com/review/527956/imposing-security/ [technologyreview.com]

Original Submission