Re: Re[2]: Penetration testing via shrinkware

["Joseph S. D. Yao" <jsdy () cospo osis gov>]

> More formalistic nonsense scams! Does someone's ability to
> predictably generate documentation really correlate to their
> ability to produce a good product that works?? ...

YES.  Absolutely.  If you can't document what you're doing, how can you
(a) assert that you've done it, or (b) test it?

And here I thought Marcus was the proponent of "design first".  ;-)

Having said that ... I haven't had time to read the SEI procedures, so
I can't speak to them.  But at least they're trying.  And they supply
something against which people may measure themselves.  Not that most
people have any interest in doing things in a proper software
engineering fashion, anyway [grumble, grumble].  ;->

--
Joe Yao                         jsdy () cospo osis gov - Joseph S. D. Yao
COSPO Computer Support                                          EMT-A/B
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.