4 ms·
Wouldn't be easier to have a more formal process for saving the source code? Like how real engineers maintain schematics and blueprints? As an alternative, DAR
by GnarfGnarf 15y ago
Wouldn't be easier to have a more formal process for saving the source code? Like how real engineers maintain schematics and blueprints?
As an alternative, DARPA could prescribe that all the executables they commission come with embedded source.
- marshray 15y agoOh sure NOW you give us that great advice... :-) I'm sure a lot of source does get saved. Nevertheless, if your task were to secure legacy government systems as quickly and strongly as possible, you're going to pray for a breakthrough like this. It's not practical to walk up to a PC and, even with full authorization, dig up all the source code to the software that's running on it. Even then, some things really are more noticeable by looking at the executable and often this is the side the attacker will be looking at. If you don't have the same or better capabilities than your adversary to analyze this side of it, you're effectively blind to your backside.
- anamax 15y ago> Wouldn't be easier to have a more formal process for saving the source code? Source code isn't enough.