[Cryptography] "NSA-linked Cisco exploit poses bigger threat than previously thought"

[Peter Gutmann]

Jerry Leichter <leichter at lrw.com> writes:

>We've had safe programming languages for quite some time, but this kind of
>code continues to be written in C.

There's also the other problem, inspired by Ed Post's comment that "the
determined Real Programmer can write FORTRAN programs in any language".  You
can write insecure code in any language, it's just that C is everywhere, and
in particular in mission-critical areas, so the problems are more visible.
Look at Java for example, no buffer overflows and no pointers so it's got to
be totally secure.  No-one has ever found an exploit involving Java, have
they?

Peter.