Re: Re[2]: Penetration testing via shrinkware

Joseph S. D. Yao (jsdycospo.osis.gov)
Wed, 23 Sep 1998 12:59:47 -0400 (EDT)

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: Darren Reed: "Re: FW-1: Questions about DHCP and IPX"
• Previous message: Chip Christian: "Re: SUN RPC portmapper"
• Next in thread: David Collier-Brown: "Re: Penetration testing via shrinkware"
• Reply: David Collier-Brown: "Re: Penetration testing via shrinkware"

> More formalistic nonsense scams! Does someone's ability to
> predictably generate documentation really correlate to their
> ability to produce a good product that works?? ...

YES. Absolutely. If you can't document what you're doing, how can you
(a) assert that you've done it, or (b) test it?

And here I thought Marcus was the proponent of "design first". ;-)

Having said that ... I haven't had time to read the SEI procedures, so
I can't speak to them. But at least they're trying. And they supply
something against which people may measure themselves. Not that most
people have any interest in doing things in a proper software
engineering fashion, anyway [grumble, grumble]. ;->

--
Joe Yao				jsdycospo.osis.gov - Joseph S. D. Yao
COSPO Computer Support						EMT-A/B
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.

• Next message: Darren Reed: "Re: FW-1: Questions about DHCP and IPX"
• Previous message: Chip Christian: "Re: SUN RPC portmapper"
• Next in thread: David Collier-Brown: "Re: Penetration testing via shrinkware"
• Reply: David Collier-Brown: "Re: Penetration testing via shrinkware"

This archive was generated by hypermail 2.0b3 on Sat Jul 17 1999 - 07:11:47 CDT