Re: College Software Texts Found To Teach Insecure Coding

[Colin Paul Gloster <Colin_Paul_Gloster@ACM.org>]

On Tue, 22 Jul 2008, Adam Beneschan posted to news:comp.lang.ada :

|---------------------------------------------------------------------|
|"The subject line was the title of an article I got in my SANS       |
|newsletter today.  I'm not clear on whether this was a contest or who|
|ran it, but "Four individuals were recognized today for their        |
|excellent descriptions of insecure code found in programming texts". |
|These texts thus contributed to "weak secure coding skills".  The    |
|texts mentioned:                                                     |
|                                                                     |
|- The Complete Reference: C 4th ed. (Osbourne)                       |
|- Programming Embedded Systems in C and C++ (O'Reilly)               |
|- C Primer Plus, Third Edition (SAMS)                                |
|- C in a Nutshell (O'Reilly)                                         |
|- Introduction to Java Programming, 7th Edition (Pearson Prentice    |
|Hall)                                                                |
|- Beginning Ruby: from Novice to Professional (Apress)               |
|- Beginning ASP Databases (Wrox)                                     |
|                                                                     |
|So guess which language doesn't appear in the above list?            |
|                                                                     |
|(Yeah, I know there's more than one language that doesn't appear, but|
|you get my point.)                                                   |
|                                                                     |
|                                  -- Adam"                           |
|---------------------------------------------------------------------|

Congratulations to those who found errors in books, highlighting once
again that the appearance of something in print should not be
considered to be a citable reference merely because it does not exist
merely as a softcopy Usenet post or email.

Another item which is also not an exemplar is "Algorithms in C++",
third edition, Parts 1-4 volume, by Robert Sedgewick and Christopher J
of Wick:
HTTP://ACCU.org/index.php/book_reviews?url=view.xqy?review=10867546023303641450

Sincerely,
Colin Paul Gloucester