4.9 • 696 Ratings
🗓️ 2 November 2021
⏱️ 7 minutes
🧾️ Download transcript
Click on a timestamp to play from that location
0:00.0 | Hello, welcome to the Tuesday, November 2, 2021 edition of the Sandstone Storm Center's Stormcast. |
0:08.9 | My name is Johannes Ulrich, and then I'm recording from Jacksonville, Florida. |
0:14.6 | A research paper entitled Trojan Sauris Invisible War on Belize by two researchers at the University of Cambridge has gotten |
0:22.7 | a lot of breasts yesterday, and the gist of the paper was that with Unicode you have the option |
0:29.9 | for bidirectional text or short bide, which essentially allows you to not only have text |
0:37.0 | running left to right, but also right to left. |
0:41.2 | And the issue here is that if this type of encoding is used in source code, the source code that a user sees |
0:49.8 | may be different from the source code that is actually being compiled by a compiler. |
0:57.0 | So the problem here is really the interface between user and code. |
1:01.0 | How do we display code to the user the way the compiler sees it? |
1:06.4 | And these bytey character codes are getting in the way because compilers are essentially ignoring |
1:15.3 | them, but editors that are displaying Unicode may actually see them and then display the text |
1:22.9 | differently than the compiler would interpret it. |
1:26.5 | The paper lists a number of languages as susceptible |
1:30.2 | as C, C++, C Sharp, JavaScript, Java, Rust, Go, and Python. One that's interestingly |
1:37.2 | missing is Apple's Swift, which actually advertises as a feature that it does support full Unicode. So, for example, you may use Unicode |
1:48.8 | characters as variables. And of course, historically, programming languages have been |
1:54.7 | heavily centered around English and have sort of adopted the English conventions for, for example, variable names |
2:03.0 | and the like. But then again, there are other languages, and the people who code in these |
2:09.1 | other languages may want to use variable names in their native language and using their native |
2:16.2 | script. The researchers are recommending that the simplest option here is to essentially tell |
2:23.2 | editors and compilers to just ignore those bidecodes and not allow the direction of the text |
... |
Please login to see the full transcript.
Disclaimer: The podcast and artwork embedded on this page are from SANS ISC Handlers, and are the property of its owner and not affiliated with or endorsed by Tapesearch.
Generated transcripts are the property of SANS ISC Handlers and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.
Copyright © Tapesearch 2025.