safety – Code Curmudgeon

Tests Aren’t Medicine

Posted on October 8, 2026 by Code Curmudgeon

A while back I got into an argument on Twitter (back when it was still called that). Somebody posted that testing is the medicine...

Jumping the Goldfish: IoT insecurity Eight Years Later.

Posted on October 1, 2026 by Code Curmudgeon

The fish will die Picture the meeting where somebody designs an internet-connected thermometer for a fish tank. Someone asks what the risk is, and...

Better Living Through Security Coding Standards

Posted on September 19, 2018 by Code Curmudgeon

Time for Standards 3d words on a clock face to illustrate guidelines and regulations for measuring performance or quality

Security for IoT and embedded devices is essentially a mess. If you’re not aware of it by now, stop and take a minute to...

Hardening Your Software Webinar

Posted on June 20, 2017 by Code Curmudgeon

The words Back to Basics written on a clear glass wall by a man holding a red marker or pen, giving you advice and information on learning the fundamentals and essentials of a valuable skill

I’ve long been an advocate for turning software development into software engineering. By this I mean that we need to start following known best...

1 2 Next ›

Definitioner

CAN (Controller Area Network): Controller Area Network aka CAN aka CAN Bus is a wiring standard for vehicles that enables communication between various components and devices without having a host computer. For example doors, brakes, transmission.
static code analysis (4G): The 4th generation of cellular wireless standards - it's the successor the 3G. There is a vast difference between how carriers interpret and implement 4G at the current time, ranging from HSPA to WiMax to LTE, each has difference performance characteristics. The standard requires peak data rates from 100 Mbit/s for high mobility to 1Gbit/s for low mobility.
static code analysis (early-adopter): Someone who likes to have the latest and greatest things. They upgrade because something is newer, bigger, faster, has better numbers, etc. Sometimes they're right, but frequently the benefit of the new numbers is not measurable.
static code analysis (pattern-based analysis): A form of static analysis where patterns of either good or bad code are stored as rules and compared against a code base without executing the code, to find potential violations.
static analysis: Any form of software analysis that can be done on the code without actually executing the code. Encompasses techniques like pattern-based analysis, metrics, code review, etc.
static code analysis (static analysis): Any form of software analysis that can be done on the code without actually executing the code. Encompasses techniques like pattern-based analysis, metrics, code review, etc.