5 ms·
Or take software. Does anyone actually believe that it was harder to write code for the ActionScript interpreter than it was to get Dowd's exploit (http://bit.l
by ankhmoop 17y ago
Or take software. Does anyone actually believe that it was harder to write code for the ActionScript interpreter than it was to get Dowd's exploit (http://bit.ly/13OjyR http://bit.ly/13OjyR) working?
It's not my intention to disparage Dowd's work in the least, but yes.
For all the cleverness involved in breaking software, it still takes years (decades?) of clever man hours to produce a secure, well performing virtual machine.
- tptacek 17y agoIt may be harder to build a "secure" system than to break an "insecure" system. We'll know when someone builds a "secure" system. Even qmail fell to integer overflows. But that's not a useful axiom. Is it harder to build a "secure" system than to break a "secure" system? Well, that seems to describe cryptography vs. cryptanalysis pretty well.