|
Zero Day
Trojan Horse
Rogue Code
They're all on Amazon.
While I have all three books, I've only had the time to read the first one. While it's not the greatest thing ever, it's been generally praised for its technical accuracy - as in, not stretching things because the author actually understands the topic, unlike other authors. Which would be expected from a guy like Mark Russinovich.
|
|
|
|
|
|
For general business applications this is very definitely a true statement. I can still see real time systems using C/C++ (at least the non-object oriented parts) for performance.
|
|
|
|
|
The object-oriented parts really don't have that much overhead, and I would never give them up for "performance" when their use was appropriate. The main problem that I see with C++ is that C# now provides more infrastructure as the result of C++ standards focusing on pedantic horseshite instead of things that actually add value.
|
|
|
|
|
The Register has a nice quote from Stroustrup in their coverage of it[^]. It's obvious from it that he doesn't know who Russinovich is, though. You're right (below) that Russinovich knows C and C++. Some of his utilities are frighteningly tight code.
Quote: "It is not unusual for people – especially executives – to become enamored with new and shiny things that promise to make their lives easier," he told us.
TTFN - Kent
|
|
|
|
|
Stroustrup is fighting a loosing battle in defending C and C++. The bottom line is that both Microsoft and Google have reported 70% of their vulnerability patches are from memory related errors. C/C++ simply are not memory safe.
|
|
|
|
|
Don't blame the language; blame the developers. I definitely blame the errors I make on myself.
|
|
|
|
|
From a security standpoint, C and C++ have several fundamental flaws:
- Unmanaged heap, leads to several problems such as "use after free", "insufficient memory" when there's plenty of memory, and memory leaks where objects are orphaned in memory
- Null terminated strings, which are the single biggest source of buffer overruns.
- Implementation defined word size and in earlier versions, no specific pointer/address data type, leading to arithmetic errors and buffer overruns.
I've written complex software in both C and C++ so I know you can usually work around these flaws in modern C/C++ compilers, but the reality is you cannot prove most C/C++ programs to be correct from a standpoint of memory management or integer arithmetic.
|
|
|
|
|
Blame the chips and the developers.
With todays CPUs, why are the data stack and call stack commingled?
How long did it take to really start using the protected memory flags for read/write/execute/etc memory blocks
|
|
|
|
|
Allow me to add that it's also time to stop using COBOL. 
|
|
|
|
|
|
Request Denied,
Only 7 people signed the petition. I think we have found the problem with California... the state government uses COBOL! 
|
|
|
|
|
For batch business processing there is nothing better; or faster.
DB2 and IMS are no slouches either.
One can mangle COBOL a lot less than they can mangle C or C++; or most any other language.
PERFORM REWRITE VARYING AMUSEMENT FROM 10 TO 0.
"Before entering on an understanding, I have meditated for a long time, and have foreseen what might happen. It is not genius which reveals to me suddenly, secretly, what I have to say or to do in a circumstance unexpected by other people; it is reflection, it is meditation." - Napoleon I
|
|
|
|
|
COBOL is very good if used properly - you can write sh*t code in any language
Life should not be a journey to the grave with the intention of arriving safely in a pretty and well-preserved body, but rather to skid in broadside in a cloud of smoke, thoroughly used up, totally worn out, and loudly proclaiming “Wow! What a Ride!" - Hunter S Thompson - RIP
|
|
|
|
|
I suppose Leslie's death got more attention the nth time around too...
The Insider News[^]
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, weighing all things in the balance of reason?
Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful?
--Zachris Topelius
|
|
|
|
|
No one reads that forum  (and  )
TTFN - Kent
|
|
|
|
|
 
M.D.V. 
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
*points at Mark*
*laughs in IoT* 
To err is human. Fortune favors the monsters.
|
|
|
|
|
..and be replaced by 16 bit VB4.
Bastard Programmer from Hell 
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
Yes, the retro movement is gaining momentum!
|
|
|
|
|
Bonnie Pink - Ring A Bell[^]
International (American and European) theme song of the Japanese game Tales of Vesperia, which I'm currently playing.
The music is the same as that of the Japanese version, which is also composed and sung by Bonnie Pink, but the lyrics are different (even after translation) and they're considered different songs.
I'm playing the English (Definitive PS4) version of the game so I'm hearing this song every time I start the game.
The animated images you see in the video are from the game and not from some cartoon.
Awesome game with an awesome soundtrack, although it's very long and I don't even know half of the music yet!
Sound of the week, but one of the best games I've ever played! 
|
|
|
|
|
Funny how the mind works, it reminded me of a-ha - Take On Me[^] straight away. I wasn't a fan of a-ha but I liked the video.
// TODO: Insert something here Top ten reasons why I'm lazy
1.
|
|
|
|
|
That is funny, I don't hear that at all
|
|
|
|
|
Agree, but I meant visually, not the sound.
// TODO: Insert something here Top ten reasons why I'm lazy
1.
|
|
|
|
|
In that case, yeah 
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
