Re: [SC-L] BSIMM: Confessions of a Software SecurityAlchemist(informIT)

2009-03-24 Thread Andy Steingruebl
On Mon, Mar 23, 2009 at 7:22 AM, Gary McGraw wrote: > hi guys, > > I think there is a bit of confusion here WRT "root" problems. In C, the > main problem is not simply strings and string representation, but rather > that the "sea of bits" can be recast to represent most anything. The > technica

Re: [SC-L] CSSLP

2009-03-24 Thread Bret Watson
> > > Although point entry is tedious, it keeps the cert honest. You > can't spend 3 > > years converting oxygen into CO2 and remain certified. You actually have to > > do a few things. A CISSP person who has renewed once or twice is quite > > different from someone who has passed the exam after

Re: [SC-L] The Importance of Type Safety

2009-03-24 Thread Jeremy Epstein
This is kind of a funny discussion, to those of us over a "certain age". When I was a young-un :-), the argument was that you couldn't write real software in a "high level" language like C because it was too inefficient compared to assembly language, and you lost flexibility since you didn't have