Secure Coding mailing list archives

Bugs and flaws

From: mouse at Rodents.Montreal.QC.CA (der Mouse)
Date: Fri, 3 Feb 2006 02:10:06 -0500 (EST)

I'm sorry, but it is just not possible to find design flaws by
staring at code.


I strongly disagree with this, largely because I've done it myself.
It's the primary way I find design flaws in code, in fact.

Even if you add "unmotivated by a misbehaviour example", I've still
done it, though on only a few occasions.

/~\ The ASCII                           der Mouse
\ / Ribbon Campaign
 X  Against HTML               mouse at rodents.montreal.qc.ca
/ \ Email!           7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B

Current thread:

Bugs and flaws, (continued)
- - - Bugs and flaws Chris Wysopal (Feb 02)
    - Bugs and flaws Blue Boar (Feb 02)
    - Bugs and flaws Al Eridani (Feb 03)
  - Bugs and flaws Gunnar Peterson (Feb 02)
- Bugs and flaws Gary McGraw (Feb 02)
  - Bugs and flaws Kenneth R. van Wyk (Feb 03)
- Bugs and flaws Gavin, Michael (Feb 02)
- Bugs and flaws Gary McGraw (Feb 02)
  - Bugs and flaws Jeff Williams (Feb 02)
  - Bugs and flaws John Steven (Feb 02)
  - Bugs and flaws der Mouse (Feb 02)
  - Bugs and flaws Wietse Venema (Feb 03)
    - Bugs and flaws Greg Beeley (Feb 03)
- Bugs and flaws Brian Chess (Feb 02)
- Bugs and flaws Gary McGraw (Feb 02)
  - Bugs and flaws Jeff Williams (Feb 02)
- Bugs and flaws Gary McGraw (Feb 03)
  - Bugs and flaws James Stibbards (Feb 03)
  - Bugs and flaws Crispin Cowan (Feb 03)
    - Bugs and flaws Dana Epp (Feb 03)
    - Bugs and flaws Crispin Cowan (Feb 07)

(Thread continues...)