C++ Logo

liaison

Advanced search

Re: [wg14/wg21 liaison] Source for Unicode Identifiers Paper

From: Uecker, Martin <Martin.Uecker_at_[hidden]>
Date: Fri, 18 Jun 2021 16:07:00 +0000

Similar looking symbols certainly makes it much worse
where code from untrusted sources needs to be reviewed.

Am Freitag, den 18.06.2021, 08:53 -0700 schrieb JF Bastien via Liaison:
> No.
>
> If malicious source code through Unicode homoglyphs are a security
> issue, then you already have a security issue with trusting your
> developers. As underhanded C contests show, you don't need Unicode to
> hide malicious code.
>
> On Fri, Jun 18, 2021 at 8:51 AM Robert Seacord via Liaison <
> liaison_at_lists.isocpp.org> wrote:
> > Are there any security concerns if we don't make this change? (I
> > work in security, so people ask me questions like this when I ask
> > about working on a proposal.)
> >
> > rCs
> >
> > On Fri, Jun 4, 2021 at 3:06 PM Steve Downey via Liaison <
> > liaison_at_[hidden]> wrote:
> > > C++ Identifier Syntax using Unicode Standard Annex 31
> > > https://github.com/steve-downey/papers/blob/master/d1949.md
> > > Slides:
> > > https://github.com/steve-downey/papers/blob/master/UAX31-EWG-slides.org
> > >
> > > _______________________________________________
> > > Liaison mailing list
> > > Liaison_at_[hidden]
> > > Subscription:
> > > https://lists.isocpp.org/mailman/listinfo.cgi/liaison
> > > Link to this post:
> > > http://lists.isocpp.org/liaison/2021/06/0602.php
> >
> > _______________________________________________
> > Liaison mailing list
> > Liaison_at_[hidden]
> > Subscription: https://lists.isocpp.org/mailman/listinfo.cgi/liaison
> > Link to this post: http://lists.isocpp.org/liaison/2021/06/0612.php
>
> _______________________________________________
> Liaison mailing list
> Liaison_at_[hidden]cpp.org
> Subscription: https://lists.isocpp.org/mailman/listinfo.cgi/liaison
> Link to this post: http://lists.isocpp.org/liaison/2021/06/0613.php

Received on 2021-06-18 11:07:51