3 ms·
I’ve often thought that it is impossible to 100% secure any software that accepts user input. I wonder if it can be proven?
by jamiek88 3y ago
I’ve often thought that it is impossible to 100% secure any software that accepts user input.
I wonder if it can be proven?
- __s 3y agoIt can be proven false
- jamiek88 3y agoAwesome! How?
- worthless-trash 3y agoAre we asking for the mathmatical answer (which I cant provide) or the practical answer (which most of us may take a stab at).
- moqmar 3y agoIt is possible to prove that a piece of code matches a given mathematical specification. That spec has to be good though, and there can still be hardware failures (e.g. bitflips), problems with the environment (if not proven correct as well), and more. It theoretically is possible though that way to at least 100% secure a not-too-complex piece of software by itself (without hardware).
- Turskarama 3y agodef __main__(): said = input("say something\r\n") print(said) Now there may well be an exploit in the interpreter itself, but I'd say that's a very different thing.
- poorlyknit 3y agoYou're in for a nasty surprise if (for whatever reason) this code is executed using Python 2: https://docs.python.org/2/library/functions.html#input https://docs.python.org/2/library/functions.html#input Equivalent to eval(raw_input(prompt)).