Berkeley CSUA MOTD:Entry 31013
Berkeley CSUA MOTD
 
WIKI | FAQ | Tech FAQ
http://csua.com/feed/
2025/07/09 [General] UID:1000 Activity:popular
7/9     

2004/6/25-26 [Computer/SW/Languages/Java] UID:31013 Activity:insanely high
6/25    What percent of security holes would be solved by banning strcpy()
        in favor of strncpy()?
        \_ probably not much, since they're all coming to be php bugs these
           days.
        \_ Or using Java instead of C (no buffer overrun)?
                \_ It is not always possible to use java. I have customers
                   who tell me that they will not allow a jvm to run on
                   their systems for security reasons (the sun jvm cannot
                   be audited by their internal code reviewers). For such
                   people the only choice is C (don't tell me to write a
                   network application in lisp, just don't). I have other
                   customers who need software that will run within a 16 mb
                   memory footprint. Unless you use Java MicroEdition it is
                   not possible to get java to standup and do something
                   useful on such systems. Even with ME, it is tough since
                   lots of libs aren't available in ME.
           \_ Any other cool things Java invented that we should know about?
                -- ilyas
              \_ I'm not sure that the PP said or implied anything that this
                 response is relevant to.  Perhaps if you externalized your
                 wit a little more, your point would be less obscure.
                 \_ Sorry I wasn't trying to be witty.  It's a bit of a sore
                    point with me when people advocate the worst possible
                    language with good_feature_001.  For instance "We chose
                    perl because perl has GC." -- ilyas
                    \_ heh, my favourite feature in any programming language
                       is how much I'd be paid to program in it.  Currently
                       msvc++ 6.0 is my mostest fav. language. - pst
                    \_ Ahh, okay.  Thanks for clarifying.
                    \_ You should probably inform all those fortune 500
                       companies out there that they're using the worst
                       possible language then.
                       \_ Ah yes, the Fortune 500, the yardstick of
                          technological sanity, and general common sense.
                            -- ilyas
                          \_ OK, academia, global 2000, most web shops,
                             most enterprise software companies...
                             \_ We've had similar arguments on the motd many
                                times before, and I tire of them.  They boil
                                down to "popular!=good".  Anyone familiar with
                                MS Windows knows this.  Let's change the
                                subject, shall we? -- ilyas
                                \_ But "popular != bad". Get off of your
                                   Ocaml horse and join the rest of us
                                   grunts.
                                   \_ I like things other than ocaml.  I even
                                      think ruby's kind of neat (if only someone
                                      would get off their lazy ass and write
                                      a good compiler for it).  Anyways, it's
                                      true that popular != bad, but if you think
                                      Java == good, I weep for your immortal
                                      soul.  -- ilyas
                                      \_ I weep for your soul if you think the
                                         mess that is functional programming
                                         is good.
                                         \_ Want a hanky?  I am well aware this
                                            is a troll, but I ll try to speak
                                            in good faith.  I don't know where
                                            you got the idea that I like
                                            'functional programming.'  I like
                                            things like lisp, and it is true
                                            that lisp is more 'functional' than
                                            Java, but lisp is also more
                                            'object oriented' than Java, since
                                            CLOS is much more powerful than
                                            Java's object system, and lisp is
                                            also more 'procedural' than Java,
                                            if for no other reason than
                                            because it doesn't have the moronic
                                            statement/expression duality.
                                            Languages that I tend to like tend
                                            to be multi-paradigm languages.
                                            The radical idea being that
                                            different jobs require different
                                            approaches. -- ilyas
           \_ wow. get a slow ass application just to avoid using strncpy
              \_ have you checked out the latest in Java with regards to
                 performance?  It's not 1997 anymore...
                \_ yes, 30 times slower than C++, 15 times slower than .Net
                   \_ we're talking about a real implementation, not your
                      half-baked hobbyist implementation.
                      \_ then again we didn't use super servers for the java
                         application
        \_ It's not really an answerable question, but if you're in a
           position to encourage/mandate its use, it's a good idea-- note
           also the strl* family from openbsd.  Having BSD code is nice because
           you can wedge it into systems that don't provide it themselves.
        \_ strncpy sucks too; it's not guaranteed to null-terminate the
           destination string.  Use strncat instead.
        \_ I would recommend using snprintf instead of the str* functions.
           snprintf will tell you if the buffer size has been exceeded,
           while the others won't. Also snprintf guarantees that the string
           will be null terminated.
           \_ snprintf wasn't added to the C standard library until C99, but
              most people still have C89 implementations.  Also, although many
              libraries provided their own snprintf function, the exact
              behavior varies slightly from implementation to implementation.
ERROR, url_link recursive (eces.Colorado.EDU/secure/mindterm2) 2025/07/09 [General] UID:1000 Activity:popular
7/9     

You may also be interested in these entries...
2013/4/29-5/18 [Computer/SW/Languages/C_Cplusplus, Computer/SW/Compilers] UID:54665 Activity:nil
4/29    Why were C and Java designed to require "break;" statements for a
        "case" section to terminate rather than falling-through to the next
        section?  99% of the time poeple want a "case" section to terminate.
        In fact some compilers issue warning if there is no "break;" statement
        in a "case" section.  Why not just design the languages to have
        termination as the default behavior, and provide a "fallthru;"
	...
2013/3/5-26 [Computer/SW/Languages/Java] UID:54618 Activity:nil
3/5     Three emergency Java updates in a month. Why do I have a feeling
        that the third one won't be the last one?
        \_ Bingo!
	...
2012/12/18-2013/1/24 [Computer/SW/Languages/Perl] UID:54561 Activity:nil
12/18   Happy 25th birthday Perl, and FUCK YOU Larry Wall for fucking up
        the computer science formalism that sets back compilers development
        back for at least a decade:
        http://techcrunch.com/2012/12/18/print-happy-25th-birthday-perl
        \_ I tried to learn Perl but was scared away by it.  Maybe scripting
           lanauages have to be like that in order to work well?
	...
2012/8/29-11/7 [Computer/SW/Security] UID:54467 Activity:nil
8/29    There was once a CSUA web page which runs an SSH client for logging
        on to soda.  Does that page still exist?  Can someone remind me of the
        URL please?  Thx.
        \_ what do you mean? instruction on how to ssh into soda?
           \_ No I think he means the ssh applet, which, iirc, was an applet
              that implemented an ssh v1 client.  I think this page went away
	...
2011/12/8-2012/1/10 [Computer/SW/Languages/Java, Computer/SW/Security] UID:54252 Activity:nil
12/8    Java code much worse IRL than pretty much everything else:
        http://preview.tinyurl.com/d5e46cq [ars technica]
	...
2011/4/16-7/13 [Computer/SW/Languages/Python] UID:54086 Activity:nil
4/16    Whoa, I just heard that MIT discontinued 6.001 (classic scheme)
        to 6.01. In fact, 6.00, 6.01 and 6.02 all use Python. What the
        hell? What has the world become? It's a sad sad day. SICP forever!
        \_ old story, they've ditched that shitty book and lang for a while.
        \_ I used to think scheme was cool, then I saw Ka Ping Yee's
           "Beautiful Code" class aka 61a in python, and converted.
	...
2011/2/24-4/20 [Computer/SW/Languages/Java] UID:54048 Activity:nil
2/24    Go Programming Language.  Anyone here use it?  It kind of
        reminds me of java-meets python, and well, that is fitting given it's
        a GOOG product.  What is so special about it?
        \_ as I understand it, it's a suitable OOP-y systems language with more
           structure than C, less complexity than C++, and less overhead than
           Java/Python.
	...
2010/8/8-9/7 [Computer/SW/Languages/C_Cplusplus, Computer/SW/Languages/Web] UID:53914 Activity:nil
8/8     Trying to make a list of interesting features languages have
        touted as this whole PL field comes around, trying to see if they
        have basis in the culture of the time: feel free to add some/dispute
        1970 C, "portability"
        1980 C++, classes, oop, iterators, streams, functors, templates
             expert systems
	...
2009/12/5-26 [Computer/SW/Languages/Java] UID:53569 Activity:nil
12/4    what do people have their JAVA_HOME's set to on soda?
        \_ don't. are you trying to get sun java? It is installed, but not
           the default.  check dpkg -l and dpkg -L
           \_ I'm trying to run maven to get scala/lift.net working
              properly and it's complaining that JAVA_HOME is not set.
              \_ you probably want one of the directories in /usr/lib/jvm,
	...
2009/9/28-10/8 [Computer/SW/Languages/C_Cplusplus] UID:53409 Activity:nil
9/28    http://www.tiobe.com/index.php/content/paperinfo/tpci/index.html
        Java is #1!!! Followed by C, PHP, C++, Visual Basic, Perl,
        C#, Python, Javascript, then finally Ruby. The good news is
        Pascal is going waaaay back up!
        \_ C is still more popular than C++?  I feel much better about myself
           now.
	...
2009/8/7-14 [Computer/SW/Languages/C_Cplusplus, Computer/SW/Languages/Java] UID:53252 Activity:high
8/6     In C one can do "typedef int my_index_t;".  What's the equivalent in
        C#?  Thanks.
        \_ C#? Are you serious? Is this what the class of 2009 learn?
           \_ No.  I have to learn .NET code at work.  I am Class of '93.
           \_ python is what 2009 learns, see the motd thread about recent
              cal courses and languages
	...
2009/7/21-24 [Computer/SW/Languages/Java] UID:53168 Activity:moderate
7/20    For those who care btw, it looks like eclipse is now A Standard Tool
        at UCB ugrad cs, probably replaced emacs.  Furthermore, people get
        angry at seeing Makefiles, (since eclispe takes care of that).  I
        guess it's just a sign of the times.
        \_ The more people at my work use eclipse the less the code is
           managable in emacs.  I'm not sure which application's fault
	...