2008-12-22, 09:23 PM
IP ban isnt lazer guided. If taking out 1 hacker costs them 10 legits, then there's little point in doing so.
Every program is insecure period. Dispite what others say, you cannot guarantee that it's secure. Even if you guarantees so, eg DJB, it doesnt mean it's secure. Programs are being coded base on packages/softwares from others, ie IO, OS etc functions. Those functions arnt being written by you. Most were written in a best effort manner to make it as secure as possible. Even a simple Hello World function uses certain bases, and unless you're ABSOLUTELY sure stuff like System.out.println/cout/printf, etc are secure, you cannot say your program is secure. The internals are mostly unknown territories to us.
There is however, the number 1 golden rule to programming, which has been expressed as an example in this thread: A program can be considered secure when it costs more resources to carry out a task than the values gained by cracking it. Eg, if it costs you 20K to break into a safe just to steal a diamond worth 15K, would you do it?
There's a balance between maintenance and development. Better development = less maintenance required. For Nexon, they need to have active GMs banning hacking accounts. Many, including myself suggested this from day 1. A script is only as good as its knowledge. An anti-virus company cannot predict what the next virus is, they can only find a way to eliminate it AFTER it exists.
As for hiring 1 person to reprogram the client, this has to be the worst joke I have ever heard.
Every program is insecure period. Dispite what others say, you cannot guarantee that it's secure. Even if you guarantees so, eg DJB, it doesnt mean it's secure. Programs are being coded base on packages/softwares from others, ie IO, OS etc functions. Those functions arnt being written by you. Most were written in a best effort manner to make it as secure as possible. Even a simple Hello World function uses certain bases, and unless you're ABSOLUTELY sure stuff like System.out.println/cout/printf, etc are secure, you cannot say your program is secure. The internals are mostly unknown territories to us.
There is however, the number 1 golden rule to programming, which has been expressed as an example in this thread: A program can be considered secure when it costs more resources to carry out a task than the values gained by cracking it. Eg, if it costs you 20K to break into a safe just to steal a diamond worth 15K, would you do it?
There's a balance between maintenance and development. Better development = less maintenance required. For Nexon, they need to have active GMs banning hacking accounts. Many, including myself suggested this from day 1. A script is only as good as its knowledge. An anti-virus company cannot predict what the next virus is, they can only find a way to eliminate it AFTER it exists.
As for hiring 1 person to reprogram the client, this has to be the worst joke I have ever heard.