Microsoft Research has pre-published a new paper to be presented at the IEEE Cybersecurity Development Conference 2018 describing their progress on Checked C, "an extension to C designed to support spatial safety, implemented in Clang and LLVM."

From "Checked C: Making C Safe By Extension": Checked C's design is distinguished by its focus on backward-compatibility, incremental conversion, developer control, and enabling highly performant code... Any part of a program may contain, and benefit from, checked pointers. Such pointers are binary-compatible with legacy, unchecked pointers but have explicitly annotated and enforced bounds. Code units annotated as checked regions provide guaranteed safety: The code within may not use unchecked pointers or unsafe casts that could result in spatial safety violations.

Checked C's bounds-safe interfaces provide checked types to unchecked code, which is useful for retrofitting third party and standard libraries. Together, these features permit incrementally adding safety to a legacy program, rather than making it an all-or-nothing proposition. Our implementation of Checked C as an LLVM extension enjoys good performance, with relatively low run-time and compilation overheads. It is freely available at https://ancillary-proxy.atarimworker.io?url=https%3A%2F%2Fgithub.com%2FMicrosoft%2Fcheckedc and continues to be actively developed.
The extension is enabled as a flag passed to Clang -- the average run-time overhead introduced by adding dynamic checks was 8.6%, though in more than half of the benchmarks the overhead was less than 1%. They also note that from 2012 to 2018, buffer overruns were the leading single cause of CVEs.

Microsoft Research says they're now evaluating Checked C, formalizing a proof of its safety guarantee -- and developing a tool to semi-automatically rewrite legacy C programs.

Tara Fitzgerald couldn't find the nude pictures she planned on sending to her boyfriend, but instead of just taking more, she decided to see if a Dell tech support call could fix her problem. Apparently the tech support guy found them. Unfortunately, he then put them up on a site called "bitchtara."

unassimilatible writes "If there was ever a sad day for nerds, it's today, as Majel Barrett-Rodenberry has passed away. The widow of Star Trek creator Gene Roddenberry is best remembered as the gorgeous Nurse Christine Chapel from the original series, the pesky and officious Lwaxana Troi from The Next Generation and Deep Space Nine, and of course the ubiquitous voice of Star Trek computers in movies, TV, and animated films (who hasn't used her voice as a system sound on their PC?). Majel also attended Star Trek conventions yearly and was a producer of Andromeda. Fortunately, Majel just finished her voice over work for the computers in J.J. Abrams' latest Trek movie. I have to admit, this made me sad, just having caught up on the entire TNG and DS9 series on DVD."

zootropole alerts us to a press release issued today by Lawrence Livermore National Laboratory, announcing the production of 'billions of particles of anti-matter.' "Take a gold sample the size of the head of a push pin, shoot a laser through it, and suddenly more than 100 billion particles of anti-matter appear. The anti-matter, also known as positrons, shoots out of the target in a cone-shaped plasma 'jet.' This new ability to create a large number of positrons in a small laboratory opens the door to several fresh avenues of anti-matter research, including an understanding of the physics underlying various astrophysical phenomena such as black holes and gamma ray bursts." The press release doesn't characterize the laser used in this experiment, but it may have been this one.

bushwhacker2000 writes to tell us that the EU may soon be requiring travelers to provide biometric data before crossing into Europe. They are trying to soften the blow by offering "streamlined" services for frequent travelers but the end result seems the same. "The proposals, contained in draft documents examined by the International Herald Tribune and scheduled to go to the European Commission on Wednesday, were designed to bring the EU visa regime into line with a new era in which passports include biometric data. The commission, the EU executive, argues that migratory pressure, organized crime and terrorism are obvious challenges to the Union and that the bloc's border and visa policy needs to be brought up to date."