Re: Are bad developer libraries the problem with M$ software?

Tom Love wrote:

>Another interesting perspective:
I agree with that.

We have some tools too:

• StackGuard <http://immunix.org/stackguard.html>: buffer overflow protection.
• FormatGuard: <http://immunix.org/formatguard.html> printf format string protection. I used to think of this attack as an aberant hack, but I now see it as an instance of the general case of bad character or string substitution of untrusted user input, similar to the kinds of problems that plague PERL & friends.
• RaceGuard: <http://immunix.org/%7Ecrispin/raceguard.pdf> temp file race attack protection.
• LSM (Linux Security Modules): <http://lsm.immunix.org/> Write your own tools.

Crispin

-- 
Crispin Cowan, Ph.D.
Chief Scientist, WireX                      
http://wirex.com/~crispin/
Security Hardened Linux Distribution:       
http://immunix.org
Available for purchase: 
http://wirex.com/Products/Immunix/purchase.html
			    Just say ".Nyet"