May 2007 - Posts
Dave Ladd has just posted a very interesting and thought provoking post over on the SDL blog: http://blogs.msdn.com/sdl/archive/2007/05/31/oil-change-or-culture-change.aspx
Read More...
I think I earned my paycheck this week :) http://www.informationweek.com/news/showArticle.jhtml?articleID=199701141
Read More...
Last week we had some tech journalists visit Redmond to discuss security products and, in my case, security engineering. One of the attendees, Mari-Len De Guzman, wrote a really balanced, non-alarmist analysis of the talk. It's a good read (IMHO!)
Read More...
Matt Thomlinson and I wrote a document explaining how to take advantage of some of the buffer overrun defenses in Windows Vista. The document is now available here . Enjoy :)
Read More...
Following on from my blog post yesterday about Dave Ladd's education vs training comments over on the SDL blog, Michael Desmon of Redmond Developer News has posted an interview we had on this subject, and asks for some input: "Tell us what your company
Read More...
David Ladd, a partner in crime, has just made a post on the SDL blog about Security Education. He starts: "There has been a lot of hoopla lately around "secure programming skills" – with not-so-thinly veiled condemnations of academicians and the role
Read More...