Re: [SC-L] re-writing college books - erm.. ahm...

2006-10-29 Thread Robert C. Seacord
Crispin, I think you may have over spoken below: Seeking perfect correctness as an approach to security is a fool's errand. Security is designing systems that can tolerate imperfect software. I could go along with achieving perfect correctness as an approach to security is a fool's belief but

Re: [SC-L] re-writing college books - erm.. ahm...

2006-10-29 Thread Crispin Cowan
Gadi Evron wrote: For argument sake, let's assume there are 100. How about campaigning for a secure coding chapter to be added to these semester, erm, world-wide? Nothing is ever easy, but we have to start somewhere. I don't see why this is a bad idea. Yes, it takes time. Yes, it will have

Re: [SC-L] re-writing college books [was: Re: A banner year for software bugs | Tech News on ZDNet]

2006-10-29 Thread David Crocker
Crispin Cowan wrote: For me, the enemy in the room is C++. It gives you the safety of C with the performance of SmallTalk. There is no excuse at all to be writing anything in C++ yet vastly too many applications are written in C++ anyway. Instead of trying to coax developers to switch from C++

Re: [SC-L] re-writing college books - erm.. ahm...

2006-10-29 Thread Gadi Evron
On Sat, 28 Oct 2006, Crispin Cowan wrote: Gadi Evron wrote: So, dump C, Use SML, What secure coding classes are you doing? and we are already doing it!! are the responses I got when I started this thread. What did you expect from whining about the generally poor quality of software?