FROM : Sheehan Olver
DATE : Mon Nov 18 00:05:10 2002
Well, Objective-C is as secure as regular C is, so I'm not really
talking about same system programs (after all, it would be pretty
trivial to make a program that makes a call to, say, "rm -r ~" even in
a Java Application). I think the security manager is mainly a factor in
applets. So a category in an applet could, theoretically, override a
method in order to get around the security manager. Now this could be
prevented by using a "final"-like keyword, but I don't believe there is
a "final" keyword in Objective-C. It was mainly meant as an example of
how something can be very powerful, but can have a drawback, and its
not as simple as saying "Java lacks categories, java sucks".
On Sunday, November 17, 2002, at 04:33 PM, David Remahl wrote:
>> I thought I'd put my 2 cents on the "java language sucks compared to
>> Objective-C" argument. This has a lot to do with what you are used to.
>> If you are used to perl, you would probably say Objective-C sucks
>> because of all the things it lacks that perl has. The fact is, every
>> language has benefits and tradeoffs. For example, Categories pose a
>> security problem as far as java is concerned since you can fool the
>> framework with your own code. What you get with java is a strong
>> security framework, a giant framework included with the jdk, servlets,
>> EJBs, cross platform support, etc. What you get with Objective-C is
>> access to C code, interface builder, truly dynamic language
>> (Categories, performSelector, etc.), fast native gui, etc. They
>> obviously have different strong points and different weaknesses, and
>> you can't really say one is superior to the other.
>
> While in general I agree with you, I have one objection...If an
> attacker
> manages (or gets a chance) to get code linked into a system, wouldn't
> that
> system already be pretty insecured (or 0wned), wether Categories are
> present
> in the runtime, or not?
>
> / rgds, David Remahl
_______________________________________________
cocoa-dev mailing list | <email_removed>
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/cocoa-dev
Do not post admin requests to the list. They will be ignored.
DATE : Mon Nov 18 00:05:10 2002
Well, Objective-C is as secure as regular C is, so I'm not really
talking about same system programs (after all, it would be pretty
trivial to make a program that makes a call to, say, "rm -r ~" even in
a Java Application). I think the security manager is mainly a factor in
applets. So a category in an applet could, theoretically, override a
method in order to get around the security manager. Now this could be
prevented by using a "final"-like keyword, but I don't believe there is
a "final" keyword in Objective-C. It was mainly meant as an example of
how something can be very powerful, but can have a drawback, and its
not as simple as saying "Java lacks categories, java sucks".
On Sunday, November 17, 2002, at 04:33 PM, David Remahl wrote:
>> I thought I'd put my 2 cents on the "java language sucks compared to
>> Objective-C" argument. This has a lot to do with what you are used to.
>> If you are used to perl, you would probably say Objective-C sucks
>> because of all the things it lacks that perl has. The fact is, every
>> language has benefits and tradeoffs. For example, Categories pose a
>> security problem as far as java is concerned since you can fool the
>> framework with your own code. What you get with java is a strong
>> security framework, a giant framework included with the jdk, servlets,
>> EJBs, cross platform support, etc. What you get with Objective-C is
>> access to C code, interface builder, truly dynamic language
>> (Categories, performSelector, etc.), fast native gui, etc. They
>> obviously have different strong points and different weaknesses, and
>> you can't really say one is superior to the other.
>
> While in general I agree with you, I have one objection...If an
> attacker
> manages (or gets a chance) to get code linked into a system, wouldn't
> that
> system already be pretty insecured (or 0wned), wether Categories are
> present
> in the runtime, or not?
>
> / rgds, David Remahl
_______________________________________________
cocoa-dev mailing list | <email_removed>
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/cocoa-dev
Do not post admin requests to the list. They will be ignored.
| Related mails | Author | Date |
|---|---|---|
| Steve Klingsporn | Nov 16, 08:39 | |
| Ondra Cada | Nov 16, 11:56 | |
| Steven W. Schuldt | Nov 16, 20:04 | |
| Alex Rice | Nov 16, 23:15 | |
| Steve Klingsporn | Nov 16, 23:20 | |
| Steve Klingsporn | Nov 16, 23:22 | |
| ssudre2 | Nov 17, 00:20 | |
| Scott Anguish | Nov 17, 02:20 | |
| Steve Klingsporn | Nov 17, 02:39 | |
| Scott Anguish | Nov 17, 02:40 | |
| Scott Anguish | Nov 17, 02:48 | |
| Steve Klingsporn | Nov 17, 02:57 | |
| Scott Anguish | Nov 17, 03:02 | |
| Steve Klingsporn | Nov 17, 03:03 | |
| Thomas Castiglione | Nov 17, 03:06 | |
| Scott Anguish | Nov 17, 03:19 | |
| Steve Klingsporn | Nov 17, 03:23 | |
| Hasan Diwan | Nov 17, 03:49 | |
| Steven W. Schuldt | Nov 17, 04:08 | |
| Scott Anguish | Nov 17, 04:18 | |
| Ondra Cada | Nov 17, 04:37 | |
| John Pannell | Nov 17, 05:54 | |
| Alex Rice | Nov 17, 08:25 | |
| Victor Ng | Nov 17, 08:27 | |
| Jonathan Hendry | Nov 17, 08:31 | |
| Jonathan Hendry | Nov 17, 09:11 | |
| Eric Wang | Nov 17, 11:43 | |
| Craig Bakalian | Nov 17, 12:31 | |
| Sherm Pendley | Nov 17, 12:34 | |
| <rixstep000 | Nov 17, 15:19 | |
| Erik J. Barzeski | Nov 17, 15:29 | |
| devdrvr.net Multi-… | Nov 17, 16:34 | |
| CyberRat17 | Nov 17, 16:45 | |
| Jonathan Hendry | Nov 17, 17:07 | |
| Pete Carss | Nov 17, 19:07 | |
| Domain Administrat… | Nov 17, 19:40 | |
| Sheehan Olver | Nov 17, 23:21 | |
| David Remahl | Nov 17, 23:33 | |
| Sheehan Olver | Nov 18, 00:05 | |
| Ondra Cada | Nov 18, 00:44 | |
| OS X AIBO | Nov 18, 03:29 | |
| <rixstep000 | Nov 18, 13:56 |






Cocoa mail archive

