Re: [SC-L] What is the size of this list?

2009-08-19 Thread Rob Floodeen
Hi SC-L,

I'm a Lurker.  I work for CERT | SEI | CMU and monitor the list in an
attempt to keep an ear to the ground.  While I'm not a professional
programmer I do have an undergrad and graduate degree in CS which
means I've been trained a little about programming.  I'm really
interested in two things with this list,

1.  How do we teach secure coding from a training perspective (I
develop training scenarios for CERT and I'm in the Workforce
Development group, so this is exactly the kind of list that draws my
attention.)

2.  How to incorporate the concept of secure coding and new
techniques/tools to do so.  This should be a minor objective through
our academic curriculum as well.  Just like advanced math skills, we
should have advanced secure coding skills for Software Engineers.

Warm Regards,
-Robert Floodeen


On Wed, Aug 19, 2009 at 11:36 AM, Rafael Ruiz wrote:
> Hi people,
>
> I am a lurker (I think), I am an embedded programmer and work at
> Lowrance (a brand of the Navico company), and I don't think I can't
> provide too much to security because embedded software is closed per se.
> Or maybe I am wrong, is there a way to grab the source code from an
> electronic equipment? That would be the only concern for embedded
> programmers like me, but I just like to learn about the thinks you talk.
>
> Thank you.
>
> Greetings from Mexico.
>
> ___
> Secure Coding mailing list (SC-L) SC-L@securecoding.org
> List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
> List charter available at - http://www.securecoding.org/list/charter.php
> SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
> as a free, non-commercial service to the software security community.
> ___
>
___
Secure Coding mailing list (SC-L) SC-L@securecoding.org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php
SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
as a free, non-commercial service to the software security community.
___


Re: [SC-L] What is the size of this list?

2009-08-19 Thread Rafael Ruiz
Hi people,

I am a lurker (I think), I am an embedded programmer and work at
Lowrance (a brand of the Navico company), and I don't think I can't
provide too much to security because embedded software is closed per se.
Or maybe I am wrong, is there a way to grab the source code from an
electronic equipment? That would be the only concern for embedded
programmers like me, but I just like to learn about the thinks you talk.

Thank you.

Greetings from Mexico.

___
Secure Coding mailing list (SC-L) SC-L@securecoding.org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php
SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
as a free, non-commercial service to the software security community.
___


Re: [SC-L] What is the size of this list?

2009-08-19 Thread SC-L Reader Dave Aronson
Arian J. Evans wrote:

> I realized I tend to think of SCL as a small list of 30 people from
> 2003 who are are all about 2 degrees of Kevin Bacon away from
> each other.

Sometimes more so than we know!  I've been here for almost six years
now, and until May, I had no idea that Karen used to work in the very
same little department at the company that was about to lay me off,
nor that we had a few other friends in common (albeit again from the
software assurance community).

> I am curious why I don't see many new names on SC-L. Lots of lurkers?

That's probably true of any email list.  I run a few where the same
couple dozen or so names keep popping up in the From lines... out of
thousands of members.

-Dave

-- 
Dave Aronson, software engineer or trainer for hire.
Looking for job (or contract) in Washington DC area.
See http://davearonson.com/ for resume & other info.
___
Secure Coding mailing list (SC-L) SC-L@securecoding.org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php
SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
as a free, non-commercial service to the software security community.
___


Re: [SC-L] What is the size of this list?

2009-08-19 Thread Kenneth Van Wyk

On Aug 18, 2009, at 2:21 PM, Arian J. Evans wrote:
Jeremiah Grossman and I were both pondering the size of the SCL  
recently.

Is the list size public?


It's not public per se, but only in the sense that the number isn't  
directly available--unless you ask for it.


The list has pretty consistently hovered around 1000 subscribers since  
pretty shortly after I launched it in late 2003.



I am curious why I don't see many new names on SC-L. Lots of lurkers?


We do seem to have a high percentage of lurkers, but I always like to  
encourage newcomers as well as new active participants.  I do my best  
to keep my moderating light, and I welcome all perspectives and  
opinions on the topics we discuss here.


My primary moderating criteria are ensuring submissions are relevant  
to the list charter and keep a civil tone.  Beyond that, everyone on  
the list is largely free to say/discuss whatever suits.


Plain and simple: the list is what the members make of it.


btw// SCL has always been a great place for academic and
progressive-minded folks to talk about state of the art, and future
ideas for secure coding. I have always recommended it to developers
looking for new places to learn as a "best and brightest" haunt. So
thanks for running it guys,


Thanks.  I've consistently found over the years that efforts like this  
are worth the effort in a myriad of ways, and it's something that I  
gladly take on.


Cheers,

Ken

-
Kenneth R. van Wyk
KRvW Associates, LLC
http://www.KRvW.com



smime.p7s
Description: S/MIME cryptographic signature
___
Secure Coding mailing list (SC-L) SC-L@securecoding.org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php
SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
as a free, non-commercial service to the software security community.
___


[SC-L] What is the size of this list?

2009-08-19 Thread Arian J. Evans
Jeremiah Grossman and I were both pondering the size of the SCL recently.

Is the list size public?

I realized I tend to think of SCL as a small list of 30 people from
2003 who are are all about 2 degrees of Kevin Bacon away from each
other.

Now that what we do has become a true industry, and and the world at
large is starting to take insecure code seriously, the importance of
this subject is much greater than a few years ago.

I am curious why I don't see many new names on SC-L. Lots of lurkers?


btw// SCL has always been a great place for academic and
progressive-minded folks to talk about state of the art, and future
ideas for secure coding. I have always recommended it to developers
looking for new places to learn as a "best and brightest" haunt. So
thanks for running it guys,


-- 
Arian Evans
___
Secure Coding mailing list (SC-L) SC-L@securecoding.org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php
SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
as a free, non-commercial service to the software security community.
___