And they want to make a business out of this!?! I really hope it’s a guy and his dog, because if it’s more than that then someone isn’t paying much attention. It allows you to use spreadsheet-style function names but you have to know what they are (BIG no no), the interface doesn’t update in [...]
Monthly Archives: June 2002
As I’ve been saying for quite some time: if you don’t own the memory space, you loose. MS, hollywood, and Intel/AMD have apparently gotten a collective clue and have decided they can do something about it. Why? Because they constitue a vertical monopoly. They are a cartel of monopolies. Simply put, palladium is designed to [...]
More on security for vendors vs. security for users. Is anyone really suprised that MS is a prime culprit here?
Ross Anderson is pretty close to being my hero at this point (although I don’t think anyone’s gonna unseat my Dad). In one of his recent papers (which made slashdot, how weird) he covers the statistics of finding/eliminating flaws in software. While the initial discussion of the methods for justifying parity between the bug rates [...]
Just in case you missed it: when you procure software, you procure liability for that software’s failures.
juicy article on biometrics. You know, just in case you actually thought they might be useful.
Well, after my whining about OWASP yesterday, I had a good email exchange with the author(s) of this article and it looks like they’ll be fixing some of the deficiencies that were introduced in the editing process.
I consider myself something of a security geek. I work for a security company, I develop applications that require security, I’ve written authentication mechanisms before, etc… So I was happy to run across OWASP. Goodness knows most web application developers wouldn’t know a good hash function if it bit them, let alone input validation, so [...]
High performance back-end for the pyMail app is now in CVS. The new back-end requires a daemon process (server.py) that runs a multi-threading Unix Domain Socket server that caches POP mailbox connections. It’s all written in Python and was quite simple to develop (the SocketServer library rocks, too bad it’s documentation doesn’t). Hopefully this should [...]