High Level Coding Language Used To Create New POS Malware (isightpartners.com)
An anonymous reader writes: A new malware framework called ModPOS is reported to pose a threat to U.S. retailers, and has some of the highest-quality coding work ever put into a ill-intentioned software of this nature. Security researchers iSight say of the ModPOS platform that it is 'much more complex than average malware'. The researchers believe that the binary output they have been studying for three years was written in a high-level language such as C, and that the software took 'a significant amount of time and resources to create and debug'.
C is a high level coding language now?
I guess contrasted with the way that one guy in last week's Q&A asked Brian Kernighan about "low level languages like Haskell" ?
Someone used a general-purpose programming language such as C to fulfill a particular purpose. By the way, it happened that they did this well. Newsworthy!
a ill-intentioned software
Software is a mass noun, and "a" become "an" before vowels.
Usually C is referred to as a "low level" language.
So, skilled programmers write a program in C. Isn't that done daily by the thousands?
In what world is "someone wrote malware in C" remotely attention-worthy?
Since when is C a high level language?
point of sale but in fact, piece of shit would be appropriate.
I think they're misusing the term "high level" when it comes to programming languages. I suspect what they're trying to get at is that it's sophisticated and competently coded.
I wonder why they assume it's C and not C++, incidentally, since they're presumably looking at decompiled assembly? I haven't done much C vs C++ side-by-side analysis of the two... is there an obvious difference in the generated assembly? I guess maybe v-table structures would point to C++, where C programmers likely wouldn't invent such constructs.
Irony: Agile development has too much intertia to be abandoned now.
WTF? He seems to think C is a high level language and he judges the code "High Quality".
Where are these morons coming from, Visual Basic?
We ALL know real programmers use Assembly.
He doesn't know shit from apple butter.
In other news "Apple Butter" is the new high level language.
'fortune | cowsay'
So a very common programming language is used to write a virus: why is this news?
that you need to call it out?
With everything going modular these days, I'm sure there's a lot of hand written assembly exploit code that then pulls down modules likely written in C. Not that it's good or bad, just odd to call it out.
With paths like this embedded in the binaries, I'd question that statement:
High Level Editors Used to Create POS Blog Site Called "SlashDot"
FTFY
If the state of software engineering has arrived at the point that so many honest-work programmers are being forced to spend so much time writing quick and dirty garbage to get them past the next sprint that, in order to have a job writing good clean code, they have to go black hat.
One of the benefits and reasons why we build Linux based systems for retail chain management, store management, supply chain management, e-commerce and such is ability to secure against these types of attacks better. Beyond that we came up with a new way of protecting credit card information by tying it to the location of the user's phone, but we are not a nominal 'fintech' and those guys are too hard to approach (for now at least).
You can't handle the truth.
C is a high level language, like a 9 mm handgun round is high velocity ammunition.
I only look human.
My mother is a halfling and my dad is an ogre, so that makes me an Ogreling
Until you find an emulator developer who complains that the emulator in a Nintendo product "is incredibly inefficient, written in HLL code, developed by somebody whom knew nothing about emulation nor about ARM nor about Z80/8080 processors." (This refers to C, as early C compilers targeting this product generated inefficient code.) Also a reset mechanism in Nintendo DS hardware "allows the NDS7 debugger to capture accidental jumps to address 0, that appears to be a common problem with HLL-programmers, asm-coders know that (and why) they should not jump to 0."
By definition, if it's malware, it's a POS. Even if it's written well.
General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
They can be used by criminals to cause harm and thus must be banned immediatley.
Except to teach girls to code. Sigh
Sorry, but I don't consider C, C++, or even Java to be "high level languages". I expect way more abstraction from a high level language. Yes, I know, Java does abstract you away from the hardware and attempts to give you "run anywhere", but realistically, if you take away all the frameworks and just use native Java, it is NOT high level.
You want a high level "language" use a 4GL like PL/SQL, Wavemaker, or heck even PowerBuilder.
If you have to write "plumbing" code, it is by definition NOT high level.
https://en.wikipedia.org/wiki/Fourth-generation_programming_language#Examples
If you want to go even higher use a 5GL, but unless you're doing AI, a 4GL is where you want to be.
Since this malware was such a POS, it did no damage.
Do you mind going back to posting in the Federal Register where your comment makes some sense?
Faster! Faster! Faster would be better!
Honestly, is it so hard to proofread three lines of writing?
What Operating system does this sophisticated malware platform run on?
Just shows that if you don't have the skills, code you write even in C# will still be a POS. Oh wait.
Comment removed based on user account deletion
Is it not common knowledge among slashdolts that debugging symbols are an option, not required? Functions are not first-class in C or C++, so the linker and compiler use decorated names, but the vtables that result don't do *runtime* dispatch between *overloaded* functions - the parameter list and name uniquely identify those for the compiler and linker.
signal to noise getting precariously low here, maybe it's time to stay soy and drop the dice...
OMFG a high level language! What in the world will we do
Somebody coded another piece of shit malware?