Re: A scary story from the real world.

From: Kilgallen@SpamCop.net (Larry Kilgallen)
Subject: Re: A scary story from the real world.
Date: 9 Nov 2007 15:25:32 -0600
Date: 2007-11-09T15:25:32-06:00	[thread overview]
Message-ID: <yljDlxvFNjsW@eisner.encompasserve.org> (raw)
In-Reply-To: K34Zi.15908$CT3.3476@newsfet01.ams

In article <K34Zi.15908$CT3.3476@newsfet01.ams>, Per Sandberg <per.sandberg@bredband.net> writes:
> Jerry wrote:
>> On Nov 9, 10:33 am, Per Sandberg <per.sandb...@bredband.net> wrote:
>>> I was on a conference this week and that opened my eyes on the complete
>>> ignorance of good compilers and languages in some the Reliable SW
>>> communities.
>>>    http://www.issre2007.hv.se/extra/pod/
>>> There was lots of talks about on how to detect values out of bounds and
>>> other problems that reasonable languages with type-system would find
>>> probably at compile time.
>>>
>>> One Microsoft person said "we had lots of crashes in the system and the
>>> cause of that was that the driver vendors did not look on the return
>>> code from functions"
>>> Then the blamed the poor programmer for not reading the secret "users
>>> manual".
>>> /Per
>> 
>> Was Ada even mentioned?
>> Jerry
>> 
>> 
> 
> No !
> And that was what i found scary.
>  From my perspective the whole conference was about how to we make the 
> best out after we have crashed instead of how do we avoid to crash.

That seems to be the attitude on the Secure Coding mailing list:

	http://www.securecoding.org/list/charter.php
	http://krvw.com/mailman/listinfo/sc-l