4 ms·
You appear to critique the premise that most security comes from using the right programming language and observing a few patterns, like validating all inputs.
by loup-vaillant 7y ago
You appear to critique the premise that most security comes from using the right programming language and observing a few patterns, like validating all inputs.
I was saying this is most probably not the premise of the course. That just like you, they don't believe they're teaching a panacea, just something that will help.
That assessment could be wrong, though. Unlike you, I never discussed security with university professors, and I know nothing of their misconceptions. Could you offer a gist of what they teach, and most importantly what they should be teaching instead?
- tptacek 7y agoAnd indeed, most security doesn't come from using the "right" language, nor is "validate all inputs" especially helpful advice (in fact, it's distinctively unhelpful, and is at times actively misleading). You can certainly use the wrong language, and that will harm your security, but for the most part almost nobody writes C anymore.