Ok you have a point by telling the coders should be more self critical and check some code more thoroughly...
As a professional code (Java/C++ and various scriptinglanguages) I know for a fact that code checked and checked double by the programmer won't be always bugfree.
That is why there are testers, testing/checking others code will enhance the security/lower bugs.

On the other hand, is (as said already in the replies) a tool/language not the issue. even when "programming" in VB you should be carefull. Not one language hasn't got security issues if misused.

This problem is a neverending problem, and will only be solved by enhanced testing and securitychecking. Get over it :-]

As you saw with sendmail recently there was a bug discovered that was there already for years! This means nothing, it just shows that however you write your code there will always be a possibility that there is a security issue with it!

Like before 1999 when they didn't know buffer overflows, how would you know how to check it? A security issue has to be found before it can be resolved...

I think this article could have been a bit more extended and less General without even pointing to the REAL CORE problem/issue in Security!

Greetings

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/150/18847#18847