Re: Education and security -- another perspective (was "ACM Queue - Content")

[Blue Boar <BlueBoar () thievco com>]

Fernando Schapachnik wrote:

I smell a discusion going nowhere. What is the point of teaching a languague?
Teach them to program in a paradigm (better, in all of them, and give them the
tools to make educated choices about which is better for each context), and
choose any language as an *example* of the paradigm.


Ah... but beyond design problems, aren't most security problems 
language-specific abuses and bugs?  I'm thinking things like "I didn't 
realize it would let me mix signed and unsigned... I didn't realize it 
would let me right off the end of the buffer... I didn't realize I had 
to escape or filter certain characters...."


                                        BB