oss-sec mailing list archives

Re: Separating code and data


From: "David A. Wheeler" <dwheeler () dwheeler com>
Date: Tue, 07 Oct 2014 22:41:03 -0400 (EDT)

On Tue, 7 Oct 2014 16:40:22 +0000, "Mehaffey, John" <John_Mehaffey () mentor com> wrote:
I think that separating code and data belongs on David's list of "Most Important
Software Innovations" (www.dwheeler.com/innovation/innovation.html), although
arguably the "Separating Text Content from Format" innovation is an example 
of the class.

Ah!  Thanks for remembering my page!!  

It's certainly true that there are real security advantages to separating code and data.  This topic brings up the old 
Harvard architecture vs. Von Neumann architecture discussion.  However, I think that the idea of having separate code 
and data streams is actually much older than digital computers.  The Jacquard loom separated code and data, and that 
dates to 1801.  The innovation was actually probably the other way, Von Neumann's allowing their *combination* ("Baby" 
is usually considered the first working example).

--- David A. Wheeler


Current thread: