Secure Coding mailing list archives

re-writing college books [was: Re: A banner year for software bugs | Tech News on ZDNet]


From: cew at ACM.ORG (Craig E. Ward)
Date: Thu, 12 Oct 2006 18:14:26 -0700

At 10:03 AM -0400 10/12/06, ljknews wrote:
At 9:20 AM -0400 10/12/06, Robert C. Seacord wrote:

 I'm also teaching a course at CMU in the spring on Secure Coding in C
 and C++.

Is there participation on this list from the (hopefully larger number of)
CMU instructors who are teaching people to use safer languages in the first
place ?
--
Larry Kilgallen


I don't think saying "use safer languages" is a good way to say it. 
It would help conditions significantly if greater care were taken to 
match the choice of programming language to the problem to be solved 
or application to be created. If a language like C is most 
appropriate, then use it, just be sure to take the extra steps needed 
to develop it securely.

The problem is so much the programming languages as it is the way 
they are used.

Craig
-- 
Internet: cew at ACM.ORG
"If a program has not been specified, it cannot be incorrect; it can 
only be surprising." (Young, Boebert, and Kain)


Current thread: