Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Bugtraq
[Top] [All Lists]

Re: Update: Web browsers - a mini-farce (MSIE gives in)

Subject: Re: Update: Web browsers - a mini-farce (MSIE gives in)
Date: Fri, 29 Oct 2004 15:38:51 -0400
On Fri, 29 Oct 2004 15:25:26 EDT, David Brodbeck said:

This suggests that it's reasonable for a program to segfault because the
user made a mistake, instead of having some non-fatal form of error
handling.  I don't think that should be acceptable at all, though I agree
it's very common.  If I had a dollar for every time I've lost work because a
segfault or GPF happened before I saved my document...

The problem is that if you say "it isn't acceptable at all", then you *VERY*
quickly end up with almost *NO* software that's "acceptable".

All software is buggy. *ALL* of it.  Learn to accept it. Making a "this is not
acceptable" declaration about something that in general is not totally
preventable is just doomed to failure.

Also, remember that programmer time is *FINITE*.  Would you have been willing
to not have the last 3 "this is indispensable" features in your favorite
software in order that the programmers track down every single possible
failure mode?  Would you give up 2? 1?

Most software projects could probably fairly easily eliminate (rough guess)
some 75-90% of the really bonehead errors via better programming methodology
and automated software testers/verifiers - but after that, it's going to be
*really* hard to get much further improvement.

There are no silver bullets....

Attachment: pgpThqHAzKtzo.pgp
Description: PGP signature

<Prev in Thread] Current Thread [Next in Thread>