[SC-L] Tech target interview

2006-05-09 Thread Gary McGraw
Hi all, Today's interview speaks to software security touchpoints: http://searchappsecurity.techtarget.com/qna/0,289202,sid92_gci1187360,00.html gem www.cigital.com/~gem www.swsec.com Sent from my treo. This electro

RE: [SC-L] By default, the Verifier is disabled on .Net and Java

2006-05-09 Thread Gary McGraw
The switch from "applets vs applications" security to "trusted code vs untrusted code" happened with the introduction of jdk 1.1 (way back when). Ed and I followed the sun marketing lead in 96 when it came to applets vs applications, but we cleared this up later in Securing Java www.securingj