News for hackers. Stuff that matters.

A comment on Megafail. Parent comment

Re:Megafail by tptacek on Wednesday January 23, 2013 @01:43PM (#5104512)
When Python performs crypto operations, it isn't doing that while running alongside potentially hostile content-controlled code.

The first thing everyone thinks when they read about browser JS being a hostile environment for crypto is, "LANGUAGE WAR!" But this issue has nothing at all to do with languages. If Python was the de-facto standard content-controlled browser programming language, we'd be saying "don't do crypto in browser Python".

[ Parent | on HN ]
Re:Megafail by sillysaurus on Wednesday January 23, 2013 @08:39PM (#5106566)
The question was "Can the design of any programming language ever affect the security of crypto code implemented correctly within it?"

This question is extremely broad, and it requires envisioning future languages which haven't been invented yet, and looking for ways the design of the language itself might impact the security of crypto code implemented within it.

That said, the question isn't the most important one. It was his third question which you and I both responded to.

[ Parent | on HN ]