[cap-talk] Midori in The Register

Jonathan S. Shapiro shap at eros-os.com
Wed Aug 6 08:28:55 CDT 2008


On Wed, 2008-08-06 at 13:46 +0100, Ben Laurie wrote:
> On Wed, Aug 6, 2008 at 2:28 AM, Jonathan S. Shapiro <shap at eros-os.com> wrote:
> > That is: managed code cannot guarantee security, but type-unsafe code
> > (which is not quite the same as unmanaged code) does guarantee the
> > absence of security.
> 
> I don't believe that's true. It may make it harder, but I don't see
> why I could not get effective "type-safety" in a non-type-safe
> language. For example, the work I've been doing in OpenSSL provides
> type checking. It can be circumvented, but if the coder does not go
> out of his way to do so, the code is effectively type-safe.

Then this code is not type-unsafe, is it?



More information about the cap-talk mailing list