WebApp Sec mailing list archives

Re: My review of 19 Sins


From: dinis_webappsec <dinis_webappsec () ddplus net>
Date: Fri, 29 Jul 2005 20:02:24 +0100

Hey, where are you got your copy of the book? :)

I have mine on order from Amazon and It hasn't arrived :(

I have to say that I had a look at the table of contents and was not very impressed, but I will wait until the book is out (and I have it in my hands) to have a quick read before I review it.

Dinis Cruz
.Net Security Consultant
Owasp .Net Project Leader

Andrew van der Stock wrote:

Hi there,

Here's my review of the 19 Sins.

http://www.greebo.net/review_19sins.html

I was expecting Writing Secure Code++, and instead we got (in my view) the Top 19 of circa 2004.

Please take this on board when you read my review - it's a great book for PHP, Java and .NET programmers who want to reduce the risk of their application generally, or if you need to explain why you want to fix something to your boss (the book is clear and well written), but it's no Writing Secure Code.

Does anyone else have any reviews? I am distinctly biased (although I tried to be objective), so I'd love to hear about other reviews as well.

thanks,
Andrew





Current thread: