RE: [Full-Disclosure] Microsoft Cries Wolf ( again )

From: Cesar (cesarc56_at_yahoo.com)
Date: 07/01/03

  • Next message: Larry W. Cashdollar: "Re: [Full-Disclosure] Re: [Full-Disclosure] iDEFENSE Security Advisory 07.01.03: Caché Insecure Installation File and Directory Permissions" 
    To: full-disclosure@lists.netsys.com
Date: Tue, 1 Jul 2003 10:59:19 -0700 (PDT)

    Code will always have bugs, humans are not perfect,
    but risks can be reduced if companies would be more
    "responsable" and if they would spend more time,
    resources, money in testing their software before
    releasing it.

    Cesar.
    --- Mike Fratto <mfratto@nwc.com> wrote:
    > Not to get into a religious argument over this, but
    > if programmers did
    > proper data scrubbing and bounds checking regardless
    > of the language, there
    > wouldn't be much of a problem either. Granted, I am
    > not uber programmer (I
    > have hacked together proggies of a couple of
    > thousand lines for my own use
    > and I am sure there were lots of problems in them)
    > but even being self
    > taught, I learned to do data scrubbing and bounds
    > checking just for
    > reliability. I have to think it is taught in
    > programming 101.

    __________________________________
    Do you Yahoo!?
    SBC Yahoo! DSL - Now only $29.95 per month!
    http://sbc.yahoo.com
    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Larry W. Cashdollar: "Re: [Full-Disclosure] Re: [Full-Disclosure] iDEFENSE Security Advisory 07.01.03: Caché Insecure Installation File and Directory Permissions"

    Relevant Pages

    • Re: my search and replace function
      ... many non-`search' characters need copying. ... already have taught you and to another lesson long experience ... has taught others. ... under laboratory conditions -- that even very good programmers ...
      (comp.lang.c)
    • Re: Thou shalt have no other gods before the ANSI C standard
      ... >> incorrect information. ... Programmers who are taught how to learn are far more effective in the ... The Theorem Theorem: If If, ...
      (sci.crypt)
    • Re: Per the discussions of Software Engineering
      ... programmers who've learned assembler are better equipped to ... they taught us structured programming in PASCAL. ... A typical embedded product program takes a week ...
      (sci.electronics.design)
    • Re: Why (or not) use single letter variable names?
      ... >>work is intended to be read by others) when programmers are ... >>taught to use descriptive variable names? ... That way it serves twin purposes of brevity and ... explanation. ...
      (comp.programming)
    • Quantcast