, 2004-12-20
How a seemingly simply Microsoft bug betrayed its author's disdain for a wide range of secure coding principles.
Expand all |
Post comment
|
Security Holes That Run Deep
, 2004-12-20 How a seemingly simply Microsoft bug betrayed its author's disdain for a wide range of secure coding principles.
Expand all |
Post comment
|
|
|
Privacy Statement |
The note about "MS Provide a list ... etc" - this won't help at all.
Currently they are already made publically aware of when a mistake occurs, and surely you can't be suggesting that MS *MEANT* to process code this way - they didn't, it was a bug - thats all.
No new guidelines or "Best Practices" can solve the issue of a programmer buggering up :)
If the _DESIGN_ was faulty (which I don't believe it was) then you have a point.
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/columns/285/29644#29644