Firewall Wizards mailing list archives

Re: Extreme Hacking

From: "Marcus J. Ranum" <mjr () nfr net>
Date: Wed, 07 Jul 1999 11:40:14 -0400

Ge' Weijers wrote:

On the other hand: those who need to develop security-related code,
protocols etc. do need to have an awareness of common exploits.


Yes, and no. They need to know classes of bugs to avoid, and
categories of common mistakes. For example, if you're developing
security critical code you need to know what buffer overruns are
and how to prevent them -- you do not need an exploit script that
tickles a bug in the latest version of BIND.

mjr.
--
Marcus J. Ranum, CEO, Network Flight Recorder, Inc.
work - http://www.nfr.net
home - http://www.clark.net/pub/mjr

Current thread:

Extreme Hacking Kunz, Peter (Jul 05)
- Re: Extreme Hacking Marcus J. Ranum (Jul 05)
  - Re: Extreme Hacking Arjan Vos (Jul 05)
  - Re: Extreme Hacking Aleph One (Jul 06)
    - Re: Extreme Hacking Marcus J. Ranum (Jul 06)
  - Re: Extreme Hacking Ge' Weijers (Jul 06)
    - Re: Extreme Hacking Marcus J. Ranum (Jul 12)
    - Re: Extreme Hacking Ge' Weijers (Jul 12)
    - Re: Extreme Hacking Darren Reed (Jul 12)
    - Re: Extreme Hacking Crispin Cowan (Jul 13)
  - Re: Extreme Hacking deab (Jul 06)
  - Re: Extreme Hacking Paul Woodie (Jul 06)
  - Re: Extreme Hacking Craig H. Rowland (Jul 06)
    - Re: Extreme Hacking Crispin Cowan (Jul 08)
    - Re: Extreme Hacking Craig H. Rowland (Jul 09)
    - Vulnerability Escrow (was: Extreme Hacking) Crispin Cowan (Jul 09)
    - Re: Extreme Hacking Joseph S D Yao (Jul 12)

(Thread continues...)