I had some time to think about the overall problem, and had originally thought of a functional approach, like so: template <typename R, typename T, typename U> R Max(T t, U u); This has all the information we need to check for truncation on...

The SDL blog has some good comments - http://blogs.msdn.com/sdl/archive/2008/01/29/sexy-development-lifecycle.aspx For the last several years, there was the Software Security Summit conference where developers could come to learn about security. The...

Ah, back to nice geeky C++ programming topics, which is much more fun than angry customer topics… Some well-meaning soul wrote this: template<typename T, typename U> T TMax(T t, U u){ return t > u ? t : u; } Let me count the bugs – first...

If you haven't already seen this , take a look. A brief quote: Microsoft Security Advisory (947563) Vulnerability in Microsoft Excel Could Allow Remote Code Execution Published: January 15, 2008 Microsoft is investigating new public reports of...

A reader wrote to ask me how it is that we know what file formats are being opened by users. I can assure you that neither the Bavarian Illuminati, UFOs nor 3-letter agencies flying black helicopters have anything at all to do with this. We're also not...

In Office 2007, we changed the default to disable a number of older file formats where we saw very low usage and a high security risk in our code that loads these formats. From the security standpoint, this is the right thing to do. From the data we have...

I was browsing the news this morning, and ran across an article - Virtual PCs add new layer of security . They claim: MojoPac virtual PCs are not just designed for mobile use. They can protect users who share the same computer. A virus introduced by...