Monthly Archives: June 2002

And they want to make a business out of this!?! I really hope it’s a guy and his dog, because if it’s more than that then someone isn’t paying much attention. It allows you to use spreadsheet-style function names but you have to know what they are (BIG no no), the interface doesn’t update in [...]

As I’ve been saying for quite some time: if you don’t own the memory space, you loose. MS, hollywood, and Intel/AMD have apparently gotten a collective clue and have decided they can do something about it. Why? Because they constitue a vertical monopoly. They are a cartel of monopolies. Simply put, palladium is designed to [...]

Cringley gets it

More on security for vendors vs. security for users. Is anyone really suprised that MS is a prime culprit here?

I wonder if I’m going to get put on a list for linking to this?

Ross Anderson is pretty close to being my hero at this point (although I don’t think anyone’s gonna unseat my Dad). In one of his recent papers (which made slashdot, how weird) he covers the statistics of finding/eliminating flaws in software. While the initial discussion of the methods for justifying parity between the bug rates [...]

Just in case you missed it: when you procure software, you procure liability for that software’s failures.

juicy article on biometrics. You know, just in case you actually thought they might be useful.

Looks like Matt and I are now members of the OWASP input filters project.

Well, after my whining about OWASP yesterday, I had a good email exchange with the author(s) of this article and it looks like they’ll be fixing some of the deficiencies that were introduced in the editing process.

I consider myself something of a security geek. I work for a security company, I develop applications that require security, I’ve written authentication mechanisms before, etc… So I was happy to run across OWASP. Goodness knows most web application developers wouldn’t know a good hash function if it bit them, let alone input validation, so [...]

High performance back-end for the pyMail app is now in CVS. The new back-end requires a daemon process (server.py) that runs a multi-threading Unix Domain Socket server that caches POP mailbox connections. It’s all written in Python and was quite simple to develop (the SocketServer library rocks, too bad it’s documentation doesn’t). Hopefully this should [...]

Good stuff for the usability minded. Web applications tend towards unusable mazes when they are nothing more pretty front ends for tables in an RDBMS. Using a bit of application logic to present good choices and sane defaults can make a users life immeasurably easier.

Sublime.

Spot on.