RE: Is this list still active?

How about the theory that the list needs more visibility?

I completely dismiss the argument that people have in general given up.
I talk to too many people interested in learning how to avoid security
problems, and know otherwise. People who give up should focus on some
other way to make a living.

Perhaps people are programming more securely, but every time we get to
be better devs, the attackers get to be better attackers. There's also
tons of room for exploring better techniques and processes to create
secure code. 

People probably are also busy fixing existing code, but if they were are
knew about this list, seems to me like they'd be asking questions about
how to overcome common issues.

So, we can either use this list to communicate, or we can go find other
forums to talk about secure programming techniques. 

My $0.02...

-----Original Message-----
From: Jeroen van Drie [mailto:jvdev@3va.net] 
Sent: Tuesday, November 23, 2004 10:37 AM
To: secprog@securityfocus.com
Subject: Re: Is this list still active?


> It means one of two things; that people are programming more securely
and  > have no need for this list since they use the suggested best
practices, or  > that people are too busy fixing their existing broken
code.

How about the notion that we've basically given up on security. 

<snip>