How can we stop the spreading insecure codingexamplesattraining classes, etc.?

[pmeunier at cerias.net (Pascal Meunier)]

I take exception (haha!) at having them dismissed like this.  It sounds like
you encountered some badly written exception handling code.  Error handling
can also be really bad, where at every call layer the original error gets
filtered or translated to a point where you just know something went wrong
somewhere but have little idea what.  Then you have to trace (yuck) and
waste hours trying to identify the problem.  I'll take limited state over no
state any day (Ruby even tells you which line numbers of which files were
involved).  

Pascal

On 8/31/06 8:29 AM, "Gary McGraw" <gem at cigital.com> wrote:

> > as an industry we did manage to get
> > rid of computed gotos, spaghetti code, etc., so maybe there's
> > hope.
>
> ever heard of exceptions?  They're basically goto plus limited state.
> Spaghetti lives!
>
> gem
>
> company www.cigital.com
> podcast www.cigital.com/silverbullet
> book www.swsec.com
>
>
>
>
> ----------------------------------------------------------------------------
> This electronic message transmission contains information that may be
> confidential or privileged.  The information contained herein is intended
> solely for the recipient and use by any other party is not authorized.  If
> you are not the intended recipient (or otherwise authorized to receive this
> message by the intended recipient), any disclosure, copying, distribution or
> use of the contents of the information is prohibited.  If you have received
> this electronic message transmission in error, please contact the sender by
> reply email and delete all copies of this message.  Cigital, Inc. accepts no
> responsibility for any loss or damage resulting directly or indirectly from
> the use of this email or its contents.
> Thank You.
> ----------------------------------------------------------------------------
>
> _______________________________________________
> Secure Coding mailing list (SC-L)
> SC-L at securecoding.org
> List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
> List charter available at - http://www.securecoding.org/list/charter.php