Programming Languages

[deviant]

Oh man I LOL'd for about 20 minutes straight after that one. That post was funny on so many levels.

1) you don't know what you're talking about
2) you don't know who you're talking to
3) obvious troll is obvious
4) I really don't care enough to correct you, it's funnier not to.

Good stuff though, next you should watch a documentary on brain surgery and then go troll some neurosurgeons with your wisdom. You kind of argue like a drunk guy though, all over the place, rambling, not making any sense, implying someone is saying one thing when they're not and then basing your whole argument on that. With a little perfection of technique you could be a much better troll.

I should not keep this going and I know I'm wasting my time on you but...
List of funny points:

Now, about programming languages being insecure, I find that it is the programmer's skill that determines whether software is secure, not the language itself,

A majority of the vulnerabilities I posted links to were in regards to how the language itself handled data.

Oh, ok, that must mean that buffer overflows in the code - for example - are fixed by applying patches

If the vulnerability exists in a programming language's function and not how that function is implemented then yes. Examples of this were in those links I provided in the first post.

If you truly have to constantly watch something like a hawk, you are doing something wrong friend. Software security is not something which you implement by watching over something at all times.

All of these quotes clearly indicate that you don't understand what leads to buffer overflows and other issues that different languages are prone to or why. Each depends on how the language is written and then how the language is implemented by the coder. Different languages produce different types of vulnerabilities. Webapps are not typically vulnerable to "Buffer overflows" (congrats on knowing a security term, here's your cookie) unless the language it's written in is vulnerable. Are you allocating buffers and doing memory management in php or does php handle that genius? Secure coding practices address known issues and are not implemented by telepathy. Are you starting to realize what kind of asshat you put on by acting like you know it all? I see this kind of shit all day everyday, it's ok, people don't know what they don't know, but when you act like you do, you run the risk of looking like a real idiot.

Yeah, because if I were storing CC data, I would rely on other people's patches, I wouldn't ENCRYPT it all to begin with. Right.

If you can decrypt it, so can whoever just pwn3d your box.

EXTREMELY LOW number of people (the group that the source code is available to) THAT MEANS THOSE SIMPLY DON'T EXIST

You have no idea how many people MS employs looking for bugs, you also have no idea how many people or what kind of equiptment they're using to look for bugs through fuzzing and other techniques. I'm not saying there's no bugs, I'm saying they've become so rare they sell for 6 figures easy and this is well known in the security industry. With all your knowledge of windows exploits, you must be sitting on a freaking goldmine over there man, what are you doing wasting your time on oprano!?!?

Mr. Mitnick (who is a friend of Oprano btw) did not know what he was talking about when he found that a Windows SBS 2003 server was compromised EIGHT HOURS after being on the net . . . what would HE know about security right? RIGGGHHHHTTTTT

This was hilarious for many many many reasons. I'm only going to state the most obvious. It was a default install, from..... 2003.
"While receiving more attacks, the Microsoft XP SP2 machine and the Macintosh OS X 10.3.3 were not compromised by"

The friend of a friend name dropping was pretty funny too, reminded me of elementary school.

The rest of your post was assumptions and made up personal attacks further leading me to believe you were drinking when you posted it. Either that or mommy put your helmet on too tight you tell me.

In order to truely understand the flaws in your argument you really need a full course in secure coding practices, buffer overflows, and how programming languages handle memory allocation and management. That's what I meant by I'm not here to teach security class, hopefully this post will clear up a little bit of your confusion. If it doesn't that's your problem, not mine. I'm not here to hold your hand just because you talked shit on the internet, there's nothing to gain by proving to every idiot they're an idiot.