RE: [SC-L] opinion, ACM Queue: Buffer Overrun Madness

2004-06-09 Thread Alun Jones
[EMAIL PROTECTED] wrote on Wednesday, June 09, 2004 7:58 AM: Although I am in favor of languages that help prevent such nasties as input buffer overruns, this is an excellent point. A sloppy programmer will write sloppy code. Reminds me of an old saying that I heard years ago while

RE: [SC-L] Missing the point?

2004-04-20 Thread Alun Jones
[EMAIL PROTECTED] wrote: Michael A. Davis wrote: Isn't she missing the point? It is not the source code that is the problem -- it is the developer. Well ofcause you can improve the quality of your code by educating your developers, but you cannot avoid doing code review. Developers are

RE: [SC-L] Opinion re an interesting article on Linux security in Linux Journal

2004-03-10 Thread Alun Jones
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michal Zalewski Sent: Tuesday, March 09, 2004 1:16 PM Uhh, with some new worms, you not only can't execute the rogue directly by just clicking on an attachment, but you need to enter a password

RE: [SC-L] Any software security news from the RSA conference?

2004-03-01 Thread Alun Jones
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of ljknews Sent: Friday, February 27, 2004 9:51 AM You must be thinking of a different Bill Gates than the one familiar to me. I am thinking of the one who announced a few years ago that Microsoft