4 ms·
"In attempts to mitigate the dangers of memory unsafe code in C and C++, many software manufacturers invest in training programs for their developers. Many of
by natsucks 3y ago
"In attempts to mitigate the dangers of memory unsafe code in C and C++,
many software manufacturers invest in training programs for their developers. Many of
these training programs include tactics designed to reduce the prevalence of memory
unsafe vulnerabilities produced by those languages. Additionally, there are numerous
commercial and industry trade association training programs. Further, various organizations
and universities offer trainings and a professional certificate for demonstrating knowledge of
secure coding practices in C and C++.
While training can reduce the number of vulnerabilities a coder might introduce, given how
pervasive memory safety defects are, it is almost inevitable that memory safety
vulnerabilities will still occur. Even the most experienced developers write bugs that can
introduce significant vulnerabilities. Training should be a bridge while an organization
implements more robust technical controls, such as memory safe languages."
- manishsharan 3y agoDoes the training go beyond showing them how to use Valgrind ?
- ARandomerDude 3y agoHow to quit vim.
- tempmac 3y agolong-press power button
- hansvm 3y agoI can see why that would sometimes work, but the better preconfigured vim installations have a long-press of the power button remapped to a 911 call, in case the user has fallen unconscious onto the keyboard and needs medical attention.
- pjot 3y agokillall -9 vim
- avgcorrection 3y agoBut what’s your point? Do we expect each other to read the submission (the report) or something? :)
- jmclnx 3y ago>"In attempts to mitigate the dangers of memory unsafe code in C and C++, many software manufacturers invest in training programs for their developers I have seen that too over the years and even been to a couple when I went to other companies, 99% of the time these classes are worthless and consists of marketing drivel. Half the class contains statements like "You can do it the hard way, or the easy way if you purchase ....". One instructor even stated "You do not need to worry about running out of memory, allocate as much as you want". That class was 20+ years ago. After that I told my manager I will not go to any more vendor classes. The training I am referring to is by experienced peers and goes on for many months where your work is reviewed in detail, 1 line at a time with you there. That use to happen decades ago, now no more.