[techtalk] theory vs. practice

[Cara Rose]

Here's where I have to stick up for at least one
academic environment. I took a class "Operating
Systems" where almost every class the prof would bring
up a new subject dealing with security. Buffer
overflow was his biggest pet peeve. 

It's disappointing to learn that this isn't common.
Yay for RPI.

Cara

(Message replying to below) 
Message: 6
Date: Sun, 13 Jan 2002 23:44:49 -0800 (PST)
From: Xp0nential Xp0nential <Xp0nential at root-core.com>
To: jockgrrl at austin.rr.com, raven at oneeyedcrow.net
Cc: techtalk at linuxchix.org
Subject: Re: [Techtalk] Theory vs. practice
Reply-To: Xp0nential at root-core.com


Hey All @-@

>Yes, but programmers aren't being taught how to avoid
these coding
>errors, or what errors to avoid.

Very true. In the academic environment there are few
schools (if there
are any) who actually have a course that deals with
code security.
Because of that,this is something that you have to
learn by yourself.
That's why participating in coding projects (open
source) helps 
learning
about those stuff. That's at least from my own
experience.

>Theory is more oriented towards "What is the
>security policy of the system and how do I know it is
the right
>one?"

That's not the type of security "theory" I had on
mind.
Its not just policy , its theory behind how things
work whether
protocols or attack methods, code vulnerabilities ...

blaaaaaaaaaaaaa
Xp0nential


__________________________________________________
Do You Yahoo!?
Send FREE video emails in Yahoo! Mail!
http://promo.yahoo.com/videomail/