Slashdot Mirror
Choice of Programming Language Doesn't Matter For Security
An anonymous reader writes "The Security Ninja has written a blog post which discusses web programming languages and the fact that they are all insecure. It's based on a report from WhiteHat Security and aims to dispel the myth that some languages will guarantee that an application will be more or less secure than other languages. '... secure code is the product of a secure development process and real business commitment to deliver secure applications which includes developer education. The absence of these processes and business commitments will lead to web applications being developed insecurely regardless of the language being used.'"
'Cause even if the source is available, the would-be attacker won't be able to understand it!
You mean I am actually supposed to know what I'm doing?!
But I dare you to write a more secure web service in , than in Java.
I didn't know Whitespace supported web services.
Careful. You might get him so mad that he'll have a buffer overflow and then core dump.
>Oh cool, is C ellipsis the new C sharp?
No, C... is secure and C# is not.
"My favourite programming language is a soldering iron".
I didn't know Whitespace supported web services.
Sure it does, I had a full shopping cart system at the end of my post by way of example.
Prove me wrong... :-)
"There is more worth loving than we have strength to love." - Brian Jay Stanley
The problem is that the set of all haskell applications is too small to be statistically significant. OK, I'm just kidding.