From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.4 X-Google-Thread: 103376,2d3d7bb776ff0b28,start X-Google-Attributes: gid103376,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII-7-bit Path: g2news2.google.com!postnews.google.com!27g2000hsf.googlegroups.com!not-for-mail From: Adam Beneschan Newsgroups: comp.lang.ada Subject: College Software Texts Found To Teach Insecure Coding Date: Tue, 22 Jul 2008 12:39:04 -0700 (PDT) Organization: http://groups.google.com Message-ID: <6556536f-759d-4ad0-ba28-91c030981b5b@27g2000hsf.googlegroups.com> NNTP-Posting-Host: 66.126.103.122 Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Trace: posting.google.com 1216755544 16380 127.0.0.1 (22 Jul 2008 19:39:04 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: Tue, 22 Jul 2008 19:39:04 +0000 (UTC) Complaints-To: groups-abuse@google.com Injection-Info: 27g2000hsf.googlegroups.com; posting-host=66.126.103.122; posting-account=duW0ogkAAABjRdnxgLGXDfna0Gc6XqmQ User-Agent: G2/1.0 X-HTTP-UserAgent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.12) Gecko/20050922 Fedora/1.7.12-1.3.1,gzip(gfe),gzip(gfe) Xref: g2news2.google.com comp.lang.ada:6980 Date: 2008-07-22T12:39:04-07:00 List-Id: The subject line was the title of an article I got in my SANS newsletter today. I'm not clear on whether this was a contest or who ran it, but "Four individuals were recognized today for their excellent descriptions of insecure code found in programming texts". These texts thus contributed to "weak secure coding skills". The texts mentioned: - The Complete Reference: C 4th ed. (Osbourne) - Programming Embedded Systems in C and C++ (O'Reilly) - C Primer Plus, Third Edition (SAMS) - C in a Nutshell (O'Reilly) - Introduction to Java Programming, 7th Edition (Pearson Prentice Hall) - Beginning Ruby: from Novice to Professional (Apress) - Beginning ASP Databases (Wrox) So guess which language doesn't appear in the above list? (Yeah, I know there's more than one language that doesn't appear, but you get my point.) -- Adam