Re: CVE-2017-14482 - Red Hat Customer Portal

[Emanuel Berg]

Mario Castelán Castro wrote:

> This is the prevalent attitude among
> programmers

Perhaps because it makes sense? It is known as
"conventional wisdom".

> we are showered by an endless stream of
> security patches and bug fixes.

Yes, and what is the problem with that?

>> If I'd send the space fleet to the oldest
>> galaxies of the universe, I'd like all
>> methods anyone could think of to make as
>> sure as possible the software is correct.
>> 
>> I'd start with very skilled and motivated
>> programmers, proceed with sound programming
>> practices, then code review, and then
>> excessive testing.
>> 
>> I suppose formal verification would be
>> a distant fourth.
>
> Well, then it is a very good thing that you
> are NOT in charge of designing that piece
> of software.

What do you mean "not in charge"?

http://user.it.uu.se/~embe8573/sounds/up.mp3

-- 
underground experts united
http://user.it.uu.se/~embe8573