Secure Coding mailing list archives
Could I use Java or c#? [was: Re: re-writingcollege books]
From: petesh at indigo.ie (Pete Shanahan)
Date: Wed, 15 Nov 2006 15:44:30 +0000
ljknews wrote:
At 8:18 PM -0600 11/14/06, Wall, Kevin wrote:That makes a Java inappropriate for a lot of system-level programming tasks. Simple example: There's no way in pure Java that I can lock a process in memory. Wrt this list, that has a lot of security ramifications especially on shared processors. Sure makes hiding secrets a lot harder.
It's an operating system feature where you can lock a chunk of the memory of a process such that it is not swapped out at any time. see the specs for mlock, madvise. win32, I believe has an even more feature ridden facility for secure memory. on the receipt of abnormal termination signals this memory can be cleared, thus keeping the secret safe, so you could produce a process crash dump that is sanitized for sending to a support group. -- Pete +353 (87) 412 9576 [M] I'm gliding over a NUCLEAR WASTE DUMP near ATLANTA, Georgia!!
Current thread:
- Could I use Java or c#? [was: Re: re-writing college books], (continued)
- Could I use Java or c#? [was: Re: re-writing college books] ljknews (Nov 13)
- Message not available
- Could I use Java or c#? [was: Re: re-writing college books] mikeiscool (Nov 13)
- Could I use Java or c#? [was: Re: re-writing college books] Leichter, Jerry (Nov 13)
- Could I use Java or c#? [was: Re: re-writing college books] mikeiscool (Nov 13)
- Could I use Java or c#? [was: Re: re-writing college books] Crispin Cowan (Nov 13)
- Could I use Java or c#? [was: Re: re-writing college books] mikeiscool (Nov 13)
- [SC-L] Could I use Java or c#? [was: Re: re-writing college books] Robin Sheat (Nov 13)
- Could I use Java or c#? [was: Re: re-writing college books] Crispin Cowan (Nov 14)
- Could I use Java or c#? [was: Re: re-writingcollege books] Wall, Kevin (Nov 14)
- Could I use Java or c#? [was: Re: re-writingcollege books] ljknews (Nov 15)
- Could I use Java or c#? [was: Re: re-writingcollege books] Pete Shanahan (Nov 15)
- Could I use Java or c#? [was: Re: re-writingcollege books] ljknews (Nov 15)
- Could I use Java or c#? [was: Re: re-writingcollege books] der Mouse (Nov 15)
- Could I use Java or c#? [was: Re: re-writingcollegebooks] Wall, Kevin (Nov 15)
- Could I use Java or c#? [was: Re: re-writingcollegebooks] ljknews (Nov 15)
- Could I use Java or c#? [was: Re: re-writing college books] mikeiscool (Nov 09)
- Could I use Java or c#? [was: Re: re-writingcollege books] David Crocker (Nov 11)
- Could I use Java or c#? [was: Re: re-writing college books] psteichen (Nov 06)
- Could I use Java or c#? [was: Re: re-writing college books] der Mouse (Nov 06)
- Could I use Java or c#? [was: Re: re-writing college books] ljknews (Nov 06)
- Could I use Java or c#? [was: Re: re-writing college books] SZALAY Attila (Nov 08)