>>The number of bytes on disk a program occupies is one of the least interesting factors about its security or lack thereof. For example, writing a progam in a higher-level language such as Java or C# will make it use more memory and drag in megs of supporting libraries. However, it will probably be safer than a corresponding C proram. <<

Shure but the point he tried to make was that the lack of security is not at the code level when you have featured filled programs, the features themself have lacking security. I have been involved in writing complex applications myself, and sometimes the implementations of have been pasted on the feature after the actual implementation of a feature/function. A few of those after-thought security features are well implemented.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/300/30752#30752