Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
Security Microsoft Java Programming Sun Microsystems

Gosling Claims Huge Security Hole in .NET 687

renai42 writes "Java creator James Gosling this week called Microsoft's decision to support C and C++ in the common language runtime in .NET one of the 'biggest and most offensive mistakes that they could have made.' Gosling further commented that by including the two languages into Microsoft's software development platform, the company 'has left open a security hole large enough to drive many, many large trucks through.'" Note that this isn't a particular vulnerability, just a system of typing that makes it easy to introduce vulnerabilities, which last time I checked, all C programmers deal with.
This discussion has been archived. No new comments can be posted.

Gosling Claims Huge Security Hole in .NET

Comments Filter:
  • Phew! (Score:5, Funny)

    by rackhamh ( 217889 ) on Friday February 04, 2005 @08:50PM (#11578838)
    Good thing Linux isn't written in...

    Oh. Never mind!
  • Woah (Score:5, Funny)

    by pHatidic ( 163975 ) on Friday February 04, 2005 @08:51PM (#11578851)
    CowboyNeal is defending Microsoft. Someone take a screengrab, Slashdot's been hacked!
  • by Faust7 ( 314817 ) on Friday February 04, 2005 @08:53PM (#11578864) Homepage
    the company 'has left open a security hole large enough to drive many, many large trucks through.'"

    Like, say, a truck about the size of Sun's Java runtime environment.
  • by Anonymous Coward on Friday February 04, 2005 @09:06PM (#11578985)
    > A hunting rifle can be used to kill people.

    Well, Visual Basic won't kill people, but it surely can drive them insane!

    > Does that mean the trigger should only work after inserting a valid and current hunting license?

    You usually need a license to instal VB.NET ...
  • by Stevyn ( 691306 ) on Friday February 04, 2005 @09:10PM (#11579016)
    No longer should homes be built using nails. All new homes should be built with really strong glue. Even though nails are faster and easier to work with, a carpenter might accidentally smash his thumb with a hammer. Plus, nails contain metal which may warp your home in the event a huge magnet is placed near the house.

    --The Elmer's Glue Foundation for Strength and Security
  • by Anonymous Coward on Friday February 04, 2005 @09:13PM (#11579050)
    Sunday! Sunday! Sunday!

  • Re:Phew! (Score:2, Funny)

    by Anonymous Coward on Friday February 04, 2005 @09:14PM (#11579062)
    How exactly would you program an operating system that runs behind a virtual machine? And it what language would the virtual machine be programmed?

    C and C++ are necessary for systems programming. Java, C#, and VB (.net version) are only useful for applications programming since they run behind a virtual machine.

    Oh, by the way, assembly language is a necessary evil as well. While some microprocessors may be developed that can directly read the bytecode, they still won't have a virtual machine running (just a real one).
  • by frovingslosh ( 582462 ) on Friday February 04, 2005 @09:33PM (#11579204)
    James Gosling this week called Microsoft's decision to support C and C++ in the common language runtime in .NET one of the 'biggest and most offensive mistakes that they could have made.'

    Gosling is dead wrong. I believe that Microsoft will soon prove they are capable of even bigger and more offensive security mistakes.

    Also, the choice to actually use .NET is at least as big of a security error.

  • Re:Phew! (Score:3, Funny)

    by Lord Kano ( 13027 ) on Friday February 04, 2005 @09:41PM (#11579251) Homepage Journal
    Good thing Linux isn't written in...

    What Visual Studio .NET? Yep. Good thing it isn't.

    LK
  • by phek ( 791955 ) on Friday February 04, 2005 @09:54PM (#11579348)
    After reading the comments to this post, I have finally lost my faith in the industry... C was around before your 'secure' languages, and C will be around long after your 'secure' languages become outdated/obsolete.
  • by clem.dickey ( 102292 ) on Friday February 04, 2005 @09:56PM (#11579360)
    A few years ago a non-techie friend mentioned that he had read an interviewer with the creator of Java.

    Me: "Oh, that would be, umm, James Gosling."

    He: "No, that's not the name. It was a lady. Let me check ... Gina Centoni."

    Me "Who?"

    A web search revealed that Ms. Centoni's position was "Director of Java Marketing." Out of the mouths of babes come all wise sayings.
  • Re:Phew! (Score:3, Funny)

    by That's Unpossible! ( 722232 ) * on Friday February 04, 2005 @11:09PM (#11579799)
    No offense, but give a fool a hammer and he'll crack his skull.

    Give a man a gun, and he can kill many people with it.

    Give that same man a pencil and... eh, not so much.
  • by Anonymous Coward on Friday February 04, 2005 @11:12PM (#11579822)
    Duh, I missed the obvious pun.
  • by 1nv4d3r ( 642775 ) on Saturday February 05, 2005 @01:04AM (#11580383)
    I guess that's why there's no java native interf...

    oh. nevermind.
  • Re:Phew! (Score:3, Funny)

    by dasunt ( 249686 ) on Saturday February 05, 2005 @01:11AM (#11580416)

    Just imagine how secure the world would be if we wrote everything in PHP! :)

  • by SimHacker ( 180785 ) on Saturday February 05, 2005 @02:09AM (#11580667) Homepage Journal
    Gosling Emacs (written by none other than James Gosling) has many HUGE security holes that you can pilot an aircraft carrier through.

    Emacs has a notorious "shell" facility that can actually run a shell and send it arbitrary commands!!!

    In fact, there's even a built-in scripting langauge called "Mocklisp" that enables hackers and viruses to totally reprogram the behavior of the editor (and it looks like Lisp, but without any of those confusing lexical closures and list processing functions).

    Gosling Emacs is actually spyware, because it has a hidden "keyboard macro" facility that can spy on every character you type! Emacs is also malware, because at any point it can instantly undo any editing changes you've made!

    One of the biggest most offensive mistakes is that James Gosling has not fixed these huge security holes in Emacs, after all these years. In fact, many of the security holes have been reimplemented in another notorious piece of communist spyware called Gnu Emacs!

    All Emacs should be banned!!!

    -Don
  • Re:Phew! (Score:1, Funny)

    by Anonymous Coward on Saturday February 05, 2005 @06:08AM (#11581347)
    most of today's OS's

    "OSes".

    mind boggling in it's ineptness
    under it's own user account

    "its".

    absolutely retarded setup's

    "setups".

We are each entitled to our own opinion, but no one is entitled to his own facts. -- Patrick Moynihan

Working...