I would never have guessed modularity as a reason to worry about security in fp.
I worry about immutability in fp, wrt security. Security requires mutability in order to remove sensitive data from memory, and from app history. A FIPS review, for example, requires demonstrating where in your code you explicitly zero memory that holds sensitive passwords. If you code entirely with immutable data structures, that's going to be problematic. If you've stuck it in some structure that retains historical application state so you can "undo", that's even more problematic. If you build debug workflows that require reloading historical application states that contain data that must not be persisted for privacy reasons, how badly does your workflow suffer when you are required to stop storing this data? On Monday, May 5, 2014 3:17:42 AM UTC-7, Magnus Therning wrote: > > On Mon, May 5, 2014 at 10:20 AM, Cecil Westerhof > <cldwes...@gmail.com<javascript:>> > wrote: > > 2014-05-05 8:21 GMT+02:00 Magnus Therning > > <mag...@therning.org<javascript:>>: > > > > >> any language" ;) However, choosing language wisely will allow you to > >> concentrate on solving the 'real' problem at hand, and relieve you > >> from solving unrelated problems (memory management, dealing with > >> pointers, etc). It will also simplify reasoning about your code. I > > > > > > That is why I do not understand that (where I live) they think you can > only > > be a good programmer if you only program in one language. > > It sounds like you have a bit of teaching to do ;) Start with > printing a few copies of Why FP Matters > (http://sector0.dk/public_files/why_fp_matters.pdf) and hand them out. > Eric Raymond's How to Become a Hacker > (http://www.catb.org/~esr/faqs/hacker-howto.html) is also a good read, > pay attention to what he says about LISP: > > LISP is worth learning for a different reason — the profound > enlightenment experience you will have when you finally get it. That > experience will make you a better programmer for the rest of your > days, even if you never actually use LISP itself a lot. > > /M > > -- > Magnus Therning OpenPGP: 0xAB4DFBA4 > email: mag...@therning.org <javascript:> jabber: > mag...@therning.org<javascript:> > twitter: magthe http://therning.org/magnus > -- You received this message because you are subscribed to the Google Groups "Clojure" group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups "Clojure" group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
