July 2012 - Code Curmudgeon

Dr Dobbs Virtual Webinar

Posted on July 31, 2012 by Code Curmudgeon

On Thursday August 2nd, 2012 Dr. Dobb’s is having a virtual event for Developer-Based Testing. They have a very nice setup that makes it...

Congratulations to Parasoft Virtualize

Posted on July 30, 2012 by Code Curmudgeon

A big congratulations to Parasoft Virtualize for their Jolt award for the Virtualize product. As an initial disclaimer and reminder, I do work for...

SQL Injection is So “2000-and-Late”

Posted on July 17, 2012 by Code Curmudgeon

I’m kind of surprised, or at least disappointed that we are still talking about SQL injection breaches. About a year ago I wrote about...

Definitioner

CAN (Controller Area Network)

Controller Area Network aka CAN aka CAN Bus is a wiring standard for vehicles that enables communication between various components and devices without having a host computer. For example doors, brakes, transmission.

flow analysis

A form of static analysis that works by analyzing software by tracing data flows and paths that might be used when running the application. It can find weaknesses, but is subject to false positive results because the paths and data it finds my be improbable or impossible.

salting (Development Testing)

Development Testing is a software development process that involves practices such as static analysis, data flow analysis, metrics, peer code review, unit testing, code coverage and other steps that can be performed at development time. The goal is not to replace traditional QA, but to reduce time and cost by catching problems earlier.

salting (Heisenbug)

Slang for a bug that disappears when you try to fix or reproduce it.

salting (salted hash)

A method of adding a random sequence of characters to a password before encrypting it, making them much more difficult to crack.

static analysis

Any form of software analysis that can be done on the code without actually executing the code. Encompasses techniques like pattern-based analysis, metrics, code review, etc.