Re: [SC-L] Interesting article on the adoption of Software Security

2004-06-12 Thread Crispin Cowan
Andreas Saurwein wrote: Crispin Cowan wrote: However, where ever C made an arbitrary decision (either way is just as good) PL/M went the opposite direction from C, making it very annoying for a C programmer to use. Does that mean it did not make any decision at all? What was the outcome? No, just

RE: [SC-L] Interesting article on the adoption of Software Security

2004-06-12 Thread Wall, Kevin
Dana Epp wrote... [...snip...] > For those of us who write kernel mode / ring0 code, what language are > you suggesting we write in? Name a good typesafe language that you have > PRACTICALLY seen to write kernel mode code in. Especially on Windows and > the Linux platform. I am not trying to fue

Re: [SC-L] Interesting article on the adoption of Software Security

2004-06-12 Thread Andreas Saurwein
Crispin Cowan wrote: However, where ever C made an arbitrary decision (either way is just as good) PL/M went the opposite direction from C, making it very annoying for a C programmer to use. Does that mean it did not make any decision at all? What was the outcome? Michael S Hines wrote: When you

Re: [SC-L] Interesting article on the adoption of Software Security

2004-06-11 Thread Crispin Cowan
Michael S Hines wrote: Likewise for the IBM Mainframe operating systems MVS,OS/390,z/OS - much of which is written in (I believe) PL/M - a dialect much like PL/1. If PL/M is the language I am remembering from an embedded systems class back in the 1980s, then it is not at all like PL/1. Rather,

RE: [SC-L] Interesting article on the adoption of Software Security

2004-06-11 Thread ljknews
At 9:16 AM -0500 6/11/04, Michael S Hines wrote: > IBM had Language Environment (LE) before .NET come along. What is Language Environment (for either of those) ?

Re: [SC-L] Interesting article on the adoption of Software Security

2004-06-11 Thread der Mouse
> For those of us who write kernel mode / ring0 code, what language are > you suggesting we write in? Name a good typesafe language that you > have PRACTICALLY seen to write kernel mode code in. Lisp. I used Lisp Machines back when I worked in academia, and almost everything was in Lisp, includi

Re: [SC-L] Interesting article on the adoption of Software Security

2004-06-11 Thread Crispin Cowan
ljknews wrote: At 2:00 PM -0700 6/10/04, Dana Epp wrote: Ok, lets turn the tables a bit here. We talked about this a bit back last December when I said that you need to use the right tool for the right job, and to quit beating on C. For those of us who write kernel mode / ring0 code, what lang

RE: [SC-L] Interesting article on the adoption of Software Security

2004-06-11 Thread Michael S Hines
Likewise for the IBM Mainframe operating systems MVS,OS/390,z/OS - much of which is written in (I believe) PL/M - a dialect much like PL/1. Many of our Operating Systems seem to have evolved out of the old DEC RSTS system. For example, CP/M had a PIP command. Later renamed to COPY in DOS. UNIX

Re: [SC-L] Interesting article on the adoption of Software Security

2004-06-11 Thread ljknews
At 2:00 PM -0700 6/10/04, Dana Epp wrote: >Ok, lets turn the tables a bit here. We talked about this a bit back last December >when I said that you need to use the right tool for the right job, and to quit >beating on C. > >For those of us who write kernel mode / ring0 code, what language are you

Re: [SC-L] Interesting article on the adoption of Software Security

2004-06-11 Thread Dana Epp
Ok, lets turn the tables a bit here. We talked about this a bit back last December when I said that you need to use the right tool for the right job, and to quit beating on C. For those of us who write kernel mode / ring0 code, what language are you suggesting we write in? Name a good typesafe

Re: [SC-L] Interesting article on the adoption of Software Security

2004-06-10 Thread Crispin Cowan
Damir Rajnovic wrote: While this is true that only some of the bugs are fixed that fixing can have unexpectedly high price tag attached. No matter how do you look at this it _is_ cheaper to fix bugs as soon as possible in the process (or not introduce them at the first place). This is true in th

Re: [SC-L] Interesting article on the adoption of Software Security

2004-06-10 Thread Damir Rajnovic
On Wed, Jun 09, 2004 at 10:37:45AM +0200, Florian Weimer wrote: > I don't think this is correct. The costs for fixing bugs is higher > later in the product lifecycle (and the article cites confirming > data), but these costs might never materialize. Only a fraction of > all bugs are found, and th

RE: [SC-L] Interesting article on the adoption of Software Security

2004-06-09 Thread John Steven

Re: [SC-L] Interesting article on the adoption of Software Security

2004-06-09 Thread Florian Weimer
* Kenneth R. van Wyk: > There's an interesting article out on Net-Security.org (see the full article > at http://www.net-security.org/article.php?id=697) that addresses why > software development organizations adopt (or do not adopt) a Software > Security development methodology. Check it out

Re: [SC-L] Interesting article on the adoption of Software Security

2004-06-08 Thread Jeff Williams
: "Kenneth R. van Wyk" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 08, 2004 12:05 PM Subject: [SC-L] Interesting article on the adoption of Software Security > There's an interesting article out on Net-Security.org (see the full article &g

[SC-L] Interesting article on the adoption of Software Security

2004-06-08 Thread Kenneth R. van Wyk
There's an interesting article out on Net-Security.org (see the full article at http://www.net-security.org/article.php?id=697) that addresses why software development organizations adopt (or do not adopt) a Software Security development methodology. Check it out -- it's a good read, IMHO. Amo