Re: [SC-L] Hiring Security Architects

2007-01-04 Thread ljknews
At 6:15 PM -0500 1/3/07, McGovern, James F (HTSC, IT) wrote: > We have had open job postings for security architects for a long time > with zero hits and I would love to understand how other enterprises are > hiring practitioners. You might consider consulting your tool vendor. Praxis does work

Re: [SC-L] Building Security In vs Auditing

2007-01-04 Thread Paco Hope
> Gary, I would love a little refinement of the benefits to badnessometers. > Let's say I get a tool to tell me something I already suspect is wrong, > what percentage of the population are better than they expected? I won't speak for Gary, but working a few doors down I have seen a few of the sa

[SC-L] New year's resolutions

2007-01-04 Thread Goertzel, Karen
In case you hadn't seen what amounts to a mini-manifesto for 2007: http://blog.wired.com/monkeybites/2007/01/new_years_resol.html -- Karen Mercedes Goertzel, CISSP Booz Allen Hamilton 703.902.6981 [EMAIL PROTECTED] ___ Secure Coding mailing list (SC-

Re: [SC-L] Compilers

2007-01-04 Thread Crispin Cowan
Florian Weimer wrote: > * Crispin Cowan: > >> ljknews wrote: >> >>> 2. The compiler market is so immature that some people are still >>>using C, C++ and Java. >>> >> I'm with you on the C and C++ argument, but what is immature about Java? >> I thought Java was a huge step

Re: [SC-L] Compilers

2007-01-04 Thread Florian Weimer
* Crispin Cowan: >>> I'm with you on the C and C++ argument, but what is immature about Java? >>> I thought Java was a huge step forward, because for the first time, a >>> statically typesafe language was widely popular. >>> >> Java is not statically typesafe, see the beloved ArrayStoreExcept

Re: [SC-L] Compilers

2007-01-04 Thread Leichter, Jerry
| Florian Weimer wrote: | > * Crispin Cowan: | > | >> ljknews wrote: | >> | >>> 2. The compiler market is so immature that some people are still | >>> using C, C++ and Java. | >>> | >> I'm with you on the C and C++ argument, but what is immature about Java? | >> I thought Java