Re: VMS

On 6/21/25 3:45 AM, Richard Kettlewell wrote:

The Natural Philosopher <tnp@invalid.invalid> writes:

On 20/06/2025 05:43, c186282 wrote:

 

The software industry has been trying this for decades now. It does
not work.

    At some point, soon, they need to start flagging
    the unsafe functions as ERRORS, not just WARNINGS.

>
The problem is that C was designed by two smart people to run on small
hardware for use by other  smart people.

 Well, maybe, but the original Unix team still ended up with buffer
overruns in their code. There’s a famous one in V7 mkdir, which ran with
elevated privileged due to the inadequate kernel API. I’ve not tried to
exploit it but it’s a pretty straightforward array overrun so almost
certainly exploitable to escalate from a mortal user to root.
 

   I'm gonna say ... today's code is just way WAY too
   complex to properly test/diagnose.
   This is a SERIOUS problem.
   Even 'AI' can only help just SO much.
   These aren't the CP/M Z80 days. More everything
   meant of kind of UNLIMITED code size/complexity
   and many MORE semi-pros with deadlines involved
   in writing it all.
   1965 ... arrow tie 'Dilberts' - SUPER good.
   Now ... ????
   There's a path, paths, to total DOOM now ......
   Vlad & Xi's boyz will find them all.
   Next year or two - it's ALL gonna go down
   REALLY hard. Just wait until your toilet
   won't flush - THEN you'll really GET it ....
   Got recent PAPER statements for your bank
   and similar accounts - something to stuff
   in their faces ? Tuff titty ........