On Sat, Nov 23, 2013 at 4:52 PM, Jann Horn wrote: > On Sat, Nov 23, 2013 at 08:14:34AM -0500, Brad Alexander wrote: >> Any program at a level not very much above Hello World >> in the language of your choice is likely to have bugs. > > Isn't that a bit extreme? I think that a good programmer who seriously > tries to code carefully should be able to implement something like an FTP > server with 90% certainty that there are no bugs. Not a complicated one > with a ton of features, but a simple one should IMO be doable.
The history of software development has, so far, shown the opposite. Any non-trivial program, regardless of the skill of the coder, will have flaws; including a simple ftp server. There are multiple tftp (trivial ftp) implementations, all of which have had CVE ids issued at some point. Best wishes, Mike -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/CANTw=MMZ0sjdFajK9qw9TLhtW6NywTUPBj+fiOhz=ej23z3...@mail.gmail.com

