RE: Another opinion on using extreme programming for security

From: Tim Hollebeek (tholleb_at_teknowledge.com)
Date: 04/16/04

  • Next message: Jose Nazario: "Re: security checkup in source control software" 
    To: <secprog@securityfocus.com>
Date: Fri, 16 Apr 2004 11:17:45 -0700

    < I disagree. Perfect (Software) Security may be a subset of perfect
    > reliability,

    Even that isn't true. In insecure program that is "broken as designed"
    may be 100% reliable. Not all security flaws are coding errors.

    -Tim

  • Next message: Jose Nazario: "Re: security checkup in source control software"

    Relevant Pages

    • Re: Another opinion on using extreme programming for security
      ... > I disagree with that to a certain extent. ... > reliability, and should be thought of in the same way. ... Perfect Security may be a subset of perfect ... only focus your efforts on a subset of the existing bugs, ...
      (SecProg)
    • Re: More on garbage
      ... Lessing performed both trading and accounting tasks, ... stopped before the bank went broke. ... there is a difference between security and reliability. ...
      (sci.crypt)
    • Re: Is MSIE dead as a browser - if Microsoft does not patch it then it is as far as I am concerned!
      ... > currently 3 identified IE vulnerabilites. ... IE has grown up a lot in speed, functionality, and reliability. ... years the patches were by and large all about more features, better speed, ... improved security simply was not what the public was crying for and the OS ...
      (microsoft.public.security.virus)
    • Re: Were losing the battle
      ... Wake me up, if you can, when the non-MF platforms can multi-task with literally thousands of tasks and still get reasonable work done in a reasonable time frame. ... And whether we like it or not, the MF still has very high reliability, excellent security and a pretty D*** high degree of recoverability. ...
      (bit.listserv.ibm-main)
    • Re: IBM fingerprint reader
      ... My new TP 43p is my second IBM machine with a fingerprint reader and works as designed. ... Not only the reader has turned out to be reliable but the security suite that comes with it is ironclad as well. ... IBM aside, I've been working with various forms of biometrics for a long time - oh, last 12 years or so, before the word "biometrics" meant anything to GP - and can vouch for its reliability. ...
      (comp.sys.laptops)