Re: reverse engineer c or java

[mattams () YAHOO CO UK (Matt inAmsterdam)]

Michael.Wojcik () merant com writes
> And, of course, that even a (hypothetical) JVM
> free of implementation errors like buffer overflows
> may contain design flaws that either do not
implement
> Java security rules correctly or fail in boundary
> conditions (like illegal opcode combinations). We've

> seen more than one exploit of that sort.

> Java's a smaller target than the huge number of
> unsafe C servers out there, but it would be a
> mistake to assume it's safe.

When a vulnerability in a jvm is discovered,
it may well allow a generic attack.  Then perhaps no
amount of responsiveness on the part of Sun, or other
jvm vendors will be enough to stem the worldwide
hacking of java stuff, due the lack of heterogeneity.

Of course it would be even worse if it's a design
problem.

-Matt van Amsterdam

____________________________________________________________
Do You Yahoo!?
Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
or your free @yahoo.ie address at http://mail.yahoo.ie