IMO the real problem is that software developers are still focussed on
programming, not on specification. We should leave programming to computers,
instead of wasting money paying people to do it and hoping that the resulting
system meets user requirements, including some semblance of security.
If
At 9:51 PM +0100 6/9/07, David Crocker wrote:
> If instead we pay people to perform the more skilled tasks of establishing
> requirements and specifying the systems to meet them, and use computers to
> generate programs that meet the specifications, then such things as freedom
> from
> buffer ove
ljknews,
Yes, it is virtually impossible to get a serious runtime error in an Ada
program. For example:
http://www.youtube.com/watch?v=kYUrqdUyEpI
rCs
> At 9:51 PM +0100 6/9/07, David Crocker wrote:
>
>
>> If instead we pay people to perform the more skilled tasks of establishing
>> requir
First off, many thanks to all who've contributed to this thread. The
responses and range of opinions I find fascinating, and I hope that
others have found value in it as well. Great stuff, keep it coming.
That said, I see us going towards that favorite of rat-holes here,
namely the "my pr
At 9:16 AM -0400 6/10/07, Robert C. Seacord wrote:
> ljknews,
>
> Yes, it is virtually impossible to get a serious runtime error in an Ada
> program. For example:
>
> http://www.youtube.com/watch?v=kYUrqdUyEpI
It amazes me that someone in a discussion of software security would point
to a page
The Ariane 5 disaster was due to a variety of software development
failures: process, reuse, design, and coding. the coding error was an
uncaught exception resulting from a floating point to integer conversion
error.
My only point was that choice of language does not in and of itself
protect y
[Apologies for this reply being a bit behind the discussion - I originally
submitted it from a different
e-mail account than the one I subscribed with, and so it sailed off to
/dev/null.]
On Wed Jun 6 18:59 , "Michael Silk" [EMAIL PROTECTED]> sent:
>On 6/7/07, McGovern, James F (HTSC, IT) [EMA
ljknews wrote:
> It amazes me that someone in a discussion of software security would point
> to a page that requires Javascript to be viewed.
I'm on a couple of mailing list with Dr. Solly, an early antivirus
researcher. he likes to talk about this idea of "Grannyx" an
(hypothetical) operating sy
James, and all list please apologies for my bad english usage. Looking
at your reply I understood I espressed my thoghuts playing bad with
words.
By saying that vendors has to follow developer licensing, I intended
that in my opinion is good that vendors still build tool to aid
developers not only
Hi,
I am working out a proposal on this OWASP Education track:
http://www.owasp.org/index.php/Education_Track:_What_Developers_Should_Know_
on_Web_Application_Security
Assume this company that is convinced that they need to do something on web
application security. They decide to send their devel
10 matches
Mail list logo