http://msdn.microsoft.com/msdnmag/issues/02/09/SecurityTips/
A subset of this list easily constitutes part of the "The Ten Commandments" of writing secure code. Michael Howard and Keith Brown hit the nail on the head with list item #8 (Pay Attention to Failure Modes).
In my opinion, "pessimistic programming" is the best form of defense against exploits. Murphy's Law decrees that a developer should expect things to fail eventually. However, this style of programming is ignored far too often; the reality of business focusing on features rather than on security or "trustworthy computing".
12:25:17 AM 
|
