RE: Writing Secure code

> And one more thing...<this one might be interesting ;-)> Is it possible
> to write code that is completely secure and not exploitable?

Yes.

main() { exit(0); }

is completely secure and not exploitable. Beyond that, you're on your own :-)

I think what you really mean is "is it possible to write code THAT DOES SOMETHING USEFUL that is completely secure and not exploitable". In general, the answer is "no". Any program of even moderate complexity, by today's standards, includes so much baggage that it's impossible to say with absolute certainty that it's secure. Even if there's no vulnerabilities in your code, the stuff you drag in (e.g., DLLs) is highly likely to have problems.

--Jeremy Received on Fri Dec 27 14:37:42 2002