Hacker News Reader

He drops knowledge quite frequently on the subject.

People who are really concerned about security starts from a clear design with security in mind.

PHP lacks any kind of design, it was just an rapidly evolved toolchan. ^_^

i guess that means that assembly, C, etc are all terrible languages because they don't have a clear design with system security in mind.

From a security perspective, kind of... it's not like for a decade or so every other security hole was a buffer overrun (or underrun, as the case may be) or others of that ilk. That's not to say they don't serve a purpose, but it's pretty easy to see that higher level languages have eliminated an entire class of security concerns in our code (at obvious costs).

> (at obvious costs)

i suppose thats my point. languages are just tools. some languages are hammers, where you can accidentally hit your thumb. some languages are like an automatic electric hammer where its all safe, but its heavy and you have to keep it plugged into the wall.

Assembly language and even C definitely aren't scripting languages for creating a home page. ^_^

what scripting language do you think was designed with security in mind, then?

Any, when author knows basic principles of secure (safe) usage of C programming language and UNIX API.

Reply on news.ycombinator.com