Re: [SC-L] IT industry creates secure coding advocacy group

I publicly support Gunnar's assertion that folks in large enterprises need to get together as a collective to drive secure coding practices. If you know of others, please do not hesitate to have them connect to me via LinkedIn (I am bad with managing contact information) and I will most certainly

[SC-L] Mainframe Security

I was thinking that there is an opportunity for us otherwise lazy enterprisey types to do our part in order to promote secure coding in an open source way. Small vendors tend to be filled with lots of folks that know C, Java and .NET but may not have anyone who knows COBOL. Minimally, they probabl

[SC-L] Orizon v0.50 announce

Hi there, I'd like to announce as delivery for Owasp Spring of Code 2007 project, the 0.50 release of Orizon. Orizon is a source code review engine, built with the aim to give developers something usable to build code review tools. Orizon is independent from the language used to write the sources

[SC-L] Hugh Thompson show

hi sc-l, Hugh Thompson (of "How to Break Software Security" fame) is the host of his own show on the AT&T Tech Channel. I went up to NY for an interview which was posted last night. I brought my son Jack and my fiddle along with me. Check out the result: http://techchannel.att.com/site/home

Re: [SC-L] Mainframe Security

On Nov 1, 2007, at 4:16 PM, Johan Peeters wrote: sSince so much of the financial services industry is powered by COBOL, I would have thought that someone would have done a thorough study of COBOL's security posture. I certainly have not found one. Anyone else? Just a couple random(ish) observa

Re: [SC-L] Mainframe Security

I think this could do a great service to the community. Recently I was hired by a major financial institution as a lead developer. They said they needed me for some Java applications, but it turns out that the majority of code is in COBOL. As I have never before been anywhere near COBOL, this come

Re: [SC-L] Mainframe Security

At 9:16 PM +0100 11/1/07, Johan Peeters wrote: > I think this could do a great service to the community. > > Recently I was hired by a major financial institution as a lead > developer. They said they needed me for some Java applications, but it > turns out that the majority of code is in COBOL. A