OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
NFR Wizards Archive: Re: Re[2]: Penetration testing via shrinkw

Re: Re[2]: Penetration testing via shrinkware


Perry E. Metzger (perrypiermont.com)
Wed, 23 Sep 1998 13:19:33 -0400


"Marcus J. Ranum" writes:
> Richard Christie wrote:
> >What your really driving at Marcus is developing software in a trusted manne
r.
> >Companies developing Firewall software should be evaluated by SEI for a
> >Capability Maturity Model (CMM) rating.
>
> ARrrggghhHH!!!!
>
> More formalistic nonsense scams! Does someone's ability to
> predictably generate documentation really correlate to their
> ability to produce a good product that works?? The SEI evaluation
> may have some validity, but it strikes me more like an attempt
> to do one of those ISO9000-oid certification scams.

I really very strongly agree.



This archive was generated by hypermail 2.0b3 on Sat Jul 17 1999 - 07:11:47 CDT