Security – Code Curmudgeon

Tests Aren’t Medicine

A while back I got into an argument on Twitter (back when it was still called that). Somebody posted that testing is the medicine...

Just for grins – people say I probably talk about Software Bill of Materials or SBOM too much. It’s definitely something I think will...

The CWE Top 25 has been updated for 2019. It’s the first change to this important list of cybersecurity issues since 2011. They also...

Security for IoT and embedded devices is essentially a mess. If you’re not aware of it by now, stop and take a minute to...

CAN (Controller Area Network): Controller Area Network aka CAN aka CAN Bus is a wiring standard for vehicles that enables communication between various components and devices without having a host computer. For example doors, brakes, transmission.
IoT (Internet of Things): common devices that have been internet enabled in order to remotely monitor and manage them, or collaborate with other devices, or provide extra functionality by accessing the internet. Like an internet enabled thermostat that you can control with your smartphone - see the Nest from Google.
BASIC: Beginners All Purpose Symbolic Instruction Code. A programming language designed specifically for beginners.
static analysis: Any form of software analysis that can be done on the code without actually executing the code. Encompasses techniques like pattern-based analysis, metrics, code review, etc.