Regular readers of Naked Security will know that one of the truisms we like to trot out about cybersecurity is the wryly self-contradictory reminder that you should “Never say never.” Indeed, when it comes to programming, the only time that you should ever say, “This will never happen” is if you can show, in a formal way, for example with an accepted mathematical axiom or a proof, that it will quite literally never happen because it can’t. For example, when a C compiler looks at this code… unsigned int i = 0; while (i >= 0) { i = the_next_value_of(i); } …and warns you that your loop will never terminate, it really can and should use the word never.

Read full article on Naked Security