Re: [SC-L] Mainframe Security

2007-11-02 Thread Glenn and Mary Everhart
ljknews wrote: At 9:16 PM +0100 11/1/07, Johan Peeters wrote: I think this could do a great service to the community. Recently I was hired by a major financial institution as a lead developer. They said they needed me for some Java applications, but it turns out that the majority of code is

Re: [SC-L] Could I use Java or c#? [was: Re: re-writing college books]

2006-11-13 Thread Glenn and Mary Everhart
Crispin Cowan wrote: Al Eridani wrote: On 11/9/06, Crispin Cowan [EMAIL PROTECTED] wrote: Prior to Java, resorting to compiling to byte code (e.g. P-code back in the Pascal days) was considered a lame kludge because the language developers couldn't be bothered to write a real compiler.

Re: [SC-L] Bumper sticker definition of secure software

2006-07-17 Thread Glenn and Mary Everhart
Crispin Cowan wrote: mikeiscool wrote: On 7/17/06, Crispin Cowan [EMAIL PROTECTED] wrote: supposed to goes to intent. I don't know. I think there is a difference between this does what it's supposed to do and this has no design faults. That's all I was trying to highlight. The difference

Re: [SC-L] Programming languages -- the third rail of secure coding

2004-08-01 Thread Glenn and Mary Everhart
Jeremy Epstein wrote: Kevin Wall pointed to http://www2.latech.edu/~acm/HelloWorld.shtml as a good source point; several of the languages I programmed in aren't listed (e.g., PL/360, which in many respects was to the IBM 360 as C was to the PDP/11). Throughout the 1970s (and maybe even 1980s) a

Re: [SC-L] ACL (access control lists) generic design questions

2004-02-27 Thread Glenn and Mary Everhart
William Herrera wrote: I think some here might have suggestions about improvements to existing ACL's. I'm working on an extensible access-control-list style authorization system, beyond the usual read/write authorization schemes, probably to be written as a Perl module for CGI use and using a