Secure Coding mailing list archives

Re: Variable comparisons


From: Martin Stricker <shugal () gmx de>
Date: Thu, 04 Dec 2003 02:07:02 +0000

Dave Aronson wrote:

On Tue December 2 2003 15:16, Chris Richards wrote:
 > it is far cheaper to design a problem out of a
 > product than it is to test a problem out of a product.  It seems
 > to me that a large part of the software industry has yet to
 > figure this out; it doesn't seem to get taught to the young
 > people coming out of University,

Unfortunately, this is only well-known THEORY, and rarely PRACTICED.
The big question is why?  My guess is the standard excuse of schedule
pressure, plus a desire to get quickly to what so many consider the
fun part, the coding.  Any others?

Yes: Two minutes before the already published release date (always a
*bad* idea!) you have to include some new feature because your
manager/customer/other moron forces you to. Remember: Nothing does live
longer than an "emergency fix just to get it out". It will never be
replaced by decent code because "it works". Happened often enough in
projects I worked for...

Best regards,
Martin Stricker
-- 
Homepage: http://www.martin-stricker.de/
Linux Migration Project: http://www.linux-migration.org/
Red Hat Linux 9 for low memory: http://www.rule-project.org/
Registered Linux user #210635: http://counter.li.org/








Current thread: