Re: Re: Code Red: What security specialist don't mention in warnings(Frank Knobbe)

["R. DuFresne" <dufresne () sysinfo com>]

On Wed, 8 Aug 2001, Darren Reed wrote:

        [SNIP]

> Oh rubbish.  If you've ever studied software engineering as a process
> you'll know about things like unit testing, regression testing, etc.
> That was before "testing tools".  How can space shuttle s/w engineers
> produce code of such a high quality yet nobody else?  Answer: their
> processes ensure it happens.  They don't need ISS or whatever.

It's not all that simple even with NASA though, remember the troubles with
the hubbles mirrors, and the peoblems with programing errors on various
probes to the sun and mars...

Of course, the propensity to rush something out to the market place
certainly enhnaces the scope of errors under the surface.  Not to mention
bloated tools designed to be the swiss army knife of networking.

I recall years back a theory on something like zero tolerance engineering,
whence the object was to refine process' of production to eliminate human
error from the production process/line, we're not even there yet...

Thanks,


Ron DuFrsne
-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        admin & senior consultant:  darkstar.sysinfo.com
                  http://darkstar.sysinfo.com

"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation."
                -- Johnny Hart

testing, only testing, and damn good at it too!

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards