How security holes happen

[Andrew Cooper]

On 03/03/2014 22:19, Cameron Simpson wrote:
> On 03Mar2014 09:17, Neal Becker <ndbecker2 at gmail.com> wrote:
>>  Charles R Harris <charlesr.harris at gmail.com> Wrote in message:
>>>
>>
>> Imo the lesson here is never write in low level c. Use modern
>>  languages with well designed exception handling.
> 
> What, and rely on someone else's low level C?
> 

Why is C the lowest denominator?

Even with correctly written C and assembly, how can you be sure that
your processor is executing the SYSRET instruction safely?
(CVE-2012-0217 for anyone interested)

~Andrew