| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Flaw spotted in new Microsoft tool | |
|
||
| Time: 14:29 EST/19:29 GMT | News Source: CNET | Posted By: Robert Stein | ||
|
A flaw in a software tool just released by Microsoft could lead software developers to inadvertently write programs that are vulnerable to attack, according to security specialists who discovered the flaw. The security problem is said to lie with the compiler that accompanies the new Visual C++.Net, just one of several tools included in Visual Studio.Net that Microsoft shipped Wednesday. Visual Studio.Net comprises new versions of the company's software development tools, including Visual Basic, Visual C++ and its new Java-like language, C#. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 304 Last | Next |
The time now is
4:35:11 PM
ET.
Any comment problems? E-mail us |
| #1 By 2332 (129.21.145.80) at 2/14/2002 2:56:55 PM |
|
Thanks to an alert Slashdot reader (gasp!):
"The protection afforded by the new feature allows developers to continue to use vulnerable string functions such as strcpy() as usual and still be "protected" against some forms of stack smashing. The new feature is closely based on an invention of Crispin Cowan's called StackGuard and is meant to be used when creating standard native code (not the new .NET intermediate language, referred to as "managed code"). " So, basically, the problem exists when you're using VC++.NET to write unmanaged code. In other words, in this very specific case, C++ programmers are writing the code they've been writing all along. Seems to me this is being blown way out of proportion... but I guess I shouldn't be surprised anymore. |
| #2 By 135 (208.50.201.48) at 2/14/2002 6:50:58 PM |
|
Last night on the radio they were interviewing the police captain who is in charge of the car theft division in our state capital. They mentioned the most popular car stolen was the Toyota Camry, partly because it was the most popular but also because there was a relatively easy way to break in.
The interviewer asked "Can I ask what that method is?" The police captain said "No, I'd rather not help thieves out." This attitude on behalf of the police is regarded as perfectly normal, yet for some reason our "security consultants" in the computer world work for the good of the thieves rather than the innocent consumers. Why is that? |
| #3 By 1474 (68.1.97.138) at 2/14/2002 9:37:09 PM |
| after 25 years of writing code, i know given time, it all can be cracked. this .net is so sweet - so let's write some code people and give the world something to use. those that don't like microsoft stuff - there are other things, just not as good. |
| #4 By 2332 (129.21.145.80) at 2/15/2002 5:39:25 AM |
|
#10 - Perhaps you should be thanking somebody else:
http://www.securityfocus.com/archive/1/256365 Looks like Cigital was simply misleading people to make Microsoft look bad. Gee... |
|
Write Comment
Return to News |
Displaying 1 through 25 of 304 Last | Next |
The time now is
4:35:11 PM
ET.
Any comment problems? E-mail us |
