Security Archives - Code Curmudgeon

CWE Top 25 2019 and On the Cusp

The CWE Top 25 has been updated for 2019. It’s the first change to this important list of cybersecurity issues since 2011. They also...

Security for IoT and embedded devices is essentially a mess. If you’re not aware of it by now, stop and take a minute to...

Two phun phishing emails in two days. Both from the same domain, nac.net, which you might want to add to your block list. Yesterday...

I was honored this week to have the opportunity to present a keynote session at EuroSPI 2016. The title of my presentation was “Software...

CAN (Controller Area Network): Controller Area Network aka CAN aka CAN Bus is a wiring standard for vehicles that enables communication between various components and devices without having a host computer. For example doors, brakes, transmission.
static code analysis (4G): The 4th generation of cellular wireless standards - it's the successor the 3G. There is a vast difference between how carriers interpret and implement 4G at the current time, ranging from HSPA to WiMax to LTE, each has difference performance characteristics. The standard requires peak data rates from 100 Mbit/s for high mobility to 1Gbit/s for low mobility.
static code analysis (early-adopter): Someone who likes to have the latest and greatest things. They upgrade because something is newer, bigger, faster, has better numbers, etc. Sometimes they're right, but frequently the benefit of the new numbers is not measurable.
static code analysis (pattern-based analysis): A form of static analysis where patterns of either good or bad code are stored as rules and compared against a code base without executing the code, to find potential violations.
static code analysis (static analysis): Any form of software analysis that can be done on the code without actually executing the code. Encompasses techniques like pattern-based analysis, metrics, code review, etc.