Author |
Topic: Online program (Read 2363 times) |
|
MrX
Guest
|
 |
Re: Online program
« Reply #16 on: Oct 1st, 2013, 11:10am » |
|
I think you are still not understanding the differences between running an exe on a server versus a client.
Quote: But of course you can run BBC BASIC under Linux (e.g. by using Brandy or Wine) so that isn't necessarily an issue.
|
|
Are you seriously suggesting that one loads Wine onto a server so it can run an exe?
Quote:
No difference and I certainly was not trying to single out BBC BASIC.
The problem with compiling your own exe for running on a server (assuming that the server actually runs Windows) is the vulnerabilities associated with them such as buffer overflows and the like.
There have been many reports about this.
Furthermore, script interpreters such as Perl PHP and so on are actually sandboxed and run as separate user (with decreased authority) especially to decrease the chances of hacks if the proverbial hits the fan and the exe is compromised.
This is something that is not that easy to achieve with an exe and Microsoft should know better, actually they do but their security track record is not exactly an illustrious one.
My intention is not to try and say that Linux is better than Windows.
All I'm trying to point out is that running a Windows exe directly on a server is not a good idea like wise with a Linux ELF binary.
|
| « Last Edit: Oct 1st, 2013, 11:35am by MrX » |
 Logged
|
|
|
|
admin
Administrator
member is offline
Posts: 1145
|
|
Re: Online program
« Reply #17 on: Oct 1st, 2013, 11:36am » |
|
on Oct 1st, 2013, 11:10am, MrX wrote:| Are you seriously suggesting that one loads Wine onto a server so it can run an exe? |
|
If I had a personal web server - and I didn't want it to run Windows - I would be prepared to do that; Wine is not a major overhead at run-time. But Brandy or Owl Basic (if and when it's ever finished) might be better choices, since they are more lightweight.
Given that support for graphics and GUI widgets would be irrelevant in a CGI application, another possibility would be recompiling BB4W as a Linux console application. That is something that has been on my wish list for a long time.
Until quite recently Jon Ripley ran a personal web server and I'm almost certain he had CGI programs written in BB4W. He was the author of the relevant Wiki article:
http://bb4w.wikispaces.com/Writing+console+mode+programs+that+will+also+run+in+the+IDE
Quote:| The problem with compiling your own exe for running on a server (assuming that the server actually runs Windows) is the vulnerabilities associated with them such as buffer overflows and the like. |
|
In that case writing a CGI application in an obscure language like BBC BASIC, which is unlikely to be targetted by hackers, sounds like a good idea! 
Richard.
|
|
Logged
|
|
|
|
MrX
Guest
|
|
Re: Online program
« Reply #18 on: Oct 1st, 2013, 11:43am » |
|
on Oct 1st, 2013, 11:36am, Richard Russell wrote:If I had a personal web server - and I didn't want it to run Windows - I would be prepared to do that; Wine is not a major overhead at run-time. But Brandy or Owl Basic (if and when it's ever finished) might be better choices, since they are more lightweight.
|
|
Richard, it has very little to do with the load it may put on a server but more to do with security loop holes associated with them.
on Oct 1st, 2013, 11:36am, Richard Russell wrote:Given that support for graphics and GUI widgets would be irrelevant in a CGI application, another possibility would be recompiling BB4W as a Linux console application. That is something that has been on my wish list for a long time.
|
|
Then why not use FASM? and simply include the BBC BASIC syntax as macros?
on Oct 1st, 2013, 11:36am, Richard Russell wrote:In that case writing a CGI application in an obscure language like BBC BASIC, which is unlikely to be targetted by hackers, sounds like a good idea!
Richard. |
|
It has nothing to do with the obscurity of a language as once it's compiled, it's all much of a muchness.
It's how the Windows Kernel treats apps that have crashed that open ups security flaws.
|
|
Logged
|
|
|
|
admin
Administrator
member is offline
Posts: 1145
|
|
Re: Online program
« Reply #19 on: Oct 1st, 2013, 12:00pm » |
|
on Oct 1st, 2013, 11:43am, MrX wrote:| Then why not use FASM? and simply include the BBC BASIC syntax as macros? |
|
Clearly you don't know very much about BBC BASIC if you think that would be "simple", or indeed even practical.
Quote:| It has nothing to do with the obscurity of a language as once it's compiled, it's all much of a muchness. |
|
A buffer overflow attack relies on knowledge of the code being targetted (e.g. by disassembling), so obscurity is beneficial. It's user-mode code (not the kernel) which is vulnerable.
This has drifted off-topic now, and I have better things to do, so I am locking the thread.
Richard.
|
|
Logged
|
|
|
|
|
