> I'm sorry, but it is just not possible to find design flaws by > staring at code.
I strongly disagree with this, largely because I've done it myself. It's the primary way I find design flaws in code, in fact. Even if you add "unmotivated by a misbehaviour example", I've still done it, though on only a few occasions. /~\ The ASCII der Mouse \ / Ribbon Campaign X Against HTML [EMAIL PROTECTED] / \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B _______________________________________________ Secure Coding mailing list (SC-L) SC-L@securecoding.org List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l List charter available at - http://www.securecoding.org/list/charter.php