Richard Pieri wrote: > Google's methodology has not to my knowledge been publicized.
Correct. >Tom Metro wrote: >> Source code analysis has the potential to find these, if the code is >> analyzed. Back-box testing will find them only if you are very lucky. > > This is laughably false. If it were even the least bit true then > Microsoft Windows would be the most secure operating system on Earth > because the code isn't available for scrutiny. What's laughable is that you write that on the same day that you chastised someone in another thread for "you taking a phrase out of context." Anyone who read this thread will recall that my comments were in the context of a certain class of errors. -Tom -- Tom Metro The Perl Shop, Newton, MA, USA "Predictable On-demand Perl Consulting." http://www.theperlshop.com/ _______________________________________________ Discuss mailing list Discuss@blu.org http://lists.blu.org/mailman/listinfo/discuss