Darkreading: Secure Coding Certification

[ljknews at mac.com (ljknews)]

At 11:35 AM -0400 5/14/07, Greg Beeley wrote:

> Agreed in concept to the "no second-class citizens" idea.  But I think
> the test needs to have a language-specific element to it.  Every language
> and environment has unique pitfalls and security considerations.  A
> developer who knows to avoid memory management, buffer, and integer issues
> in C may have no clue about nul-poisoning in a web scripting language's
> counted (as opposed to zero-terminated) strings.

And they may have no need for that.
-- 
Larry Kilgallen