Re: Microsoft Writing Secure Code

On Thu, 09 Dec 2004 09:57:53 GMT, Rui Covelo said:

> I was looking for some opinions about the book "Writing Secure Code"
> from Microsoft press. The book is already "old" but I only got to read
> it now...

There's a Second Edition out, not sure if you knew that.  The 2nd Ed has
been out a while, but is certainly not "old" in the sense of "info gone
stale" - a quick check doesn't find anything outdated in it....

> I was wondering if any of you have read it and what you think about
> it. Do you find it useful or plain microsoft propaganda (like I read
> somewhere else)?

There's a lot of Microsoft-specific info in there, but hardly "propaganda".

It's definitely a useful book for the nuts-and-bolts info that the guys
actually writing the code - it's a bit weak on the top-level design issues,
but given the title, I can hardly fault them for that (it *is* a "writing code"
book ;)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQFBuHFtcC3lWbTT17ARAk0OAJwNbO9i34ONt9HgIF3B/P5PLKc7EACfWj/N
bQ71uGRnEg9d9o1bcri3AW8=
=NZvw
-----END PGP SIGNATURE-----