Support Forums: Message List - Do We Need an "IDE 2.0" Revolution? http://www.theserverside.com Most recent forum messages en Jive Forums Silver 5.5.30 (www.jivesoftware.com) Mon, 20 May 2013 02:25:27 -0400 Re: Do We Need an "IDE 2.0" Revolution? http://www.theserverside.com/discussions/thread.tss?thread_id=46941 Mon, 24 Sep 2007 13:29:25 -0400 Mon, 24 Sep 2007 13:29:25 -0400 Mon, 24 Sep 2007 13:29:25 -0400 Sep 24, 2007 Bryan MacLean 0 Re: Really bad analogy http://www.theserverside.com/discussions/thread.tss?thread_id=46941 I'm not worried about security, because Lisper have this problem everytime they call LOAD, COMPILE, or EVAL. They've always had this problem, and they have all sorts of mechanisms that they can use to get around it (it's not that difficult to...]]> Mon, 24 Sep 2007 09:38:57 -0400 Mon, 24 Sep 2007 09:38:57 -0400 Mon, 24 Sep 2007 09:38:57 -0400 Sep 24, 2007 James Watson 0 Re: IDE != Eclipse/NetBeans/JBuilder/etc http://www.theserverside.com/discussions/thread.tss?thread_id=46941 Not to be a Luddite or anything, but the Unix shell environment is still one of the best IDEs. With some technology-specific tools (e.g., Ant) and some shell scripts, it's possible to be at least as productive as with a graphical tool shell....]]> Sun, 23 Sep 2007 13:25:31 -0400 Sun, 23 Sep 2007 13:25:31 -0400 Sun, 23 Sep 2007 13:25:31 -0400 Sep 23, 2007 Nikita Ivanov 0 Re: Really bad analogy http://www.theserverside.com/discussions/thread.tss?thread_id=46941 I have no idea how familiar you are with LISP and I'm no LISP expert but allow me to try to make sure what I am saying is clear. In LISP there is no clear distinction between data and instructions. Writing logs as LISP, as I understand it,...]]> Fri, 21 Sep 2007 18:06:57 -0400 Fri, 21 Sep 2007 18:06:57 -0400 Fri, 21 Sep 2007 18:06:57 -0400 Sep 21, 2007 Will Hartung 1 Re: Really bad analogy http://www.theserverside.com/discussions/thread.tss?thread_id=46941
The common flaw that allows an SQL injection attack is taking data (usually user input) and combining it with other text to create an instruction (an SQL statement).


Ah, that. Yup, evil as can be. It's a...]]> Fri, 21 Sep 2007 09:13:51 -0400 Fri, 21 Sep 2007 09:13:51 -0400 Fri, 21 Sep 2007 09:13:51 -0400 Sep 21, 2007 James Watson 2 Re: Really bad analogy http://www.theserverside.com/discussions/thread.tss?thread_id=46941 The common flaw that allows an SQL injection attack is taking data (usually user input) and combining it with other text to create an instruction (an SQL statement)....]]> Fri, 21 Sep 2007 07:55:13 -0400 Fri, 21 Sep 2007 07:55:13 -0400 Fri, 21 Sep 2007 07:55:13 -0400 Sep 21, 2007 Spencer Portee 3 Re: IDE != Eclipse/NetBeans/JBuilder/etc http://www.theserverside.com/discussions/thread.tss?thread_id=46941 Not to be a Luddite or anything, but the Unix shell environment is still one of the best IDEs. With some technology-specific tools (e.g., Ant) and some shell scripts, it's possible to be at least as productive as with a graphical tool shell....]]> Thu, 20 Sep 2007 16:33:18 -0400 Thu, 20 Sep 2007 16:33:18 -0400 Thu, 20 Sep 2007 16:33:18 -0400 Sep 20, 2007 James Watson 1 Re: Really bad analogy http://www.theserverside.com/discussions/thread.tss?thread_id=46941
Code that is subject to SQL injection is an example of not keeping data and instructions properly separated.
More accurately, it's code that's wrapped in other code, with no secure, good protocol, binding the...]]> Thu, 20 Sep 2007 16:29:10 -0400 Thu, 20 Sep 2007 16:29:10 -0400 Thu, 20 Sep 2007 16:29:10 -0400 Sep 20, 2007 James Watson 4 IDE != Eclipse/NetBeans/JBuilder/etc http://www.theserverside.com/discussions/thread.tss?thread_id=46941 My take is that graphical interfaces to-date are good for making specific simple tasks less monotonous. But the more complex the task, the more the GUI gets in the way. One example I use often is that in a windowing environment, if I need...]]> Thu, 20 Sep 2007 16:07:16 -0400 Thu, 20 Sep 2007 16:07:16 -0400 Thu, 20 Sep 2007 16:07:16 -0400 Sep 20, 2007 Tracy Nelson 2 Re: Really bad analogy http://www.theserverside.com/discussions/thread.tss?thread_id=46941 Code that is subject to SQL injection is an example of not keeping data and instructions properly separated.More accurately, it's code that's wrapped in other code, with no secure, good protocol, binding the two. The data is in...]]> Thu, 20 Sep 2007 16:06:22 -0400 Thu, 20 Sep 2007 16:06:22 -0400 Thu, 20 Sep 2007 16:06:22 -0400 Sep 20, 2007 Spencer Portee 5 Re: Do We Need an "IDE 2.0" Revolution? http://www.theserverside.com/discussions/thread.tss?thread_id=46941 Thu, 20 Sep 2007 14:51:16 -0400 Thu, 20 Sep 2007 14:51:16 -0400 Thu, 20 Sep 2007 14:51:16 -0400 Sep 20, 2007 Geoff Longman 0 Re: Really bad analogy http://www.theserverside.com/discussions/thread.tss?thread_id=46941
It's possible that a graphical language could be created. As I understand it, the ancient Greek mathematicians did a lot of their proofs using graphics. The pictures had specific clear meanings. There's no reason we can't have...]]> Thu, 20 Sep 2007 14:16:20 -0400 Thu, 20 Sep 2007 14:16:20 -0400 Thu, 20 Sep 2007 14:16:20 -0400 Sep 20, 2007 James Watson 0 Re: Really bad analogy http://www.theserverside.com/discussions/thread.tss?thread_id=46941
As I understand it, this violates the cardinal rule of secure software design: do not mix data and instructions.


Tell that to the LISP folk.

I suppose another example would be JSON and JavaScript where...]]> Thu, 20 Sep 2007 14:04:41 -0400 Thu, 20 Sep 2007 14:04:41 -0400 Thu, 20 Sep 2007 14:04:41 -0400 Sep 20, 2007 James Watson 6 Re: Really bad analogy http://www.theserverside.com/discussions/thread.tss?thread_id=46941 It's possible that a graphical language could be created. As I understand it, the ancient Greek mathematicians did a lot of their proofs using graphics. The pictures had specific clear meanings. There's no reason we can't have a graphical...]]> Thu, 20 Sep 2007 13:45:15 -0400 Thu, 20 Sep 2007 13:45:15 -0400 Thu, 20 Sep 2007 13:45:15 -0400 Sep 20, 2007 George Coller 1 Re: Really bad analogy http://www.theserverside.com/discussions/thread.tss?thread_id=46941 As I understand it, this violates the cardinal rule of secure software design: do not mix data and instructions.
...]]> Thu, 20 Sep 2007 13:41:07 -0400 Thu, 20 Sep 2007 13:41:07 -0400 Thu, 20 Sep 2007 13:41:07 -0400 Sep 20, 2007 George Coller 7