News (47)

Expert: Hold developers liable for flaws

Software developers should be held personally accountable for the security of the code they write, said Howard Schmidt, a former White House cybersecurity adviser. Read more »

Oracle to be more selective in patch development

Oracle plans to stop automatically producing security patches for all systems its software runs on, instead creating fixes for uncommon combinations on request, the company said on Tuesday. Read more »

Software should defend itself: Oracle CSO

Applications will have to defend themselves from attack in the future, according to Oracle's chief security officer Mary Ann Davidson. Read more »

Security guru wants access to bug databases

Security expert Ross Anderson has called for empirical research to be conducted into whether open source or closed source software is more secure, and into the impact that development practices such as extreme programming (XP) have on code quality. Read more »

Study: Few bugs in MySQL database

A source-code analysis of the MySQL database, a popular open-source program at the heart of many Web sites, revealed few bugs compared with the number found in commercial code, testing company Coverity said Friday. Read more »

Developers take Linux attacks to heart

A handful of recent online attacks on free and open-source software servers has open-source developers looking over their shoulders. Read more »

Microsoft claims secure development success

A program placing strict controls on developers to ensure they build secure code is showing early signs of success, according to a senior executive from the software giant. Read more »

Developers fast to fix open-source bugs

Developers have quickly fixed many bugs in popular open-source packages that were flagged as part of a US government-sponsored bug hunt. Read more »

Microsoft may offer peek at SQL Server code

Will the software industry's wave of open-source databases spill onto Microsoft's turf? Read more »

Microsoft to release more source code?

Microsoft is considering the release of source code for a popular tool used to build Windows programs. Read more »

More Code, Database, Developer, Security News Results

Features (150)

Diagnose Perl CGI bugs

Capturing and replaying Web transactions with Perl is an ideal way to trap and diagnose weird data problems that occasionally happen. ZDNet Australia examines what this technique entails and introduces a small module that shows some ways to put it to work. Read more »

Develop applications that prevent intrusion

Designing secure applications requires developers to look beyond their own code. Accessing APIs or COM objects or establishing system privileges can result in security vulnerabilities that can be prevented. Read more »

Security through obscurity won't secure your code

Most applications use some form of security through obscurity, but you should avoid it when writing your apps. ZDNet Australia offers these tips on how to tighten up your code. Read more »

Comprehend the SAP Authorisation concept with these code samples

Whether you're a developer, a consultant, or the user of a SAP system, you'll eventually come across issues related to authorisation. This article provides some handy code samples to help you get acquainted with authorisation in SAP. Read more »

Make managed code work with .NET's CAS

Developers and administrators can set permission and trust levels with code access security (CAS), while allowing the code to execute effectively. Read more »

CGI wrappers for Apache-based apps can boost security

CGI scripts represent a big potential security risk in Web development, but using CGI wrappers can help insulate your servers from attack. Here's an outline of how to create CGI wrappers to protect an Apache Web server. Read more »

Diagnose SQL Server performance problems

Usually, the hardest part of database tuning is finding the code bottlenecks. SQL Profiler's traces can help you locate your sluggish code. Read more »

Diagnose SQL Server performance problems

Usually, the hardest part of database tuning is finding the slow part. SQL Profiler's traces can help you find your sluggish code. Read more »

Develop secure software at the application level

Protect your application from input overflow and underflow attacks, and from other common tactics with these development techniques. Read more »

Creating your project budget: Where to begin?

Defining a budget for development projects is frequently referred to as an art form.To ensure an accurate projection of the amount of money required to deliver a solution, follow these guidelines to help you create a realistic budget. Read more »

More Code, Database, Developer, Security Features Results

Blog (2)

Google destroys Security Through Obscurity

Chris Duckett [blogs:betaliving] -- Google Labs' new Code Search makes it easier for hackers to find database username and password details by entering strings that are commonly used within configuration files. Read more »

Lets Shindig!

Lana Kovacevic [blogs:webanatomy] -- At this year's Google Developer Day in Sydney, Dan Peterson and John Hjelmstad talked about Apache Shindig, an open source implementation of OpenSocial and gadgets. Read more »

Log in


Sign up | Forgot your password?

Blogs

RSS feed

  • Staff A first look at Windows 7 beta

    In this week's Roundup we show you a preview of Windows 7 beta, cover news from the annual Macworld and more. Read more »

    -- posted by Staff

  • Staff Opera's new SDK: Better browsing on the Wii?

    Opera has thrown a little more love at device developers by announcing an updated version of its software development kit on Wednesday at CES. Read more »

    -- posted by Staff

  • Staff 2008: Time to call stumps

    It's another year down but some things never change. That was shown this week as Internet Explorer remained under fire from yet another zero-day exploit. In other news, we set a hard drive on fire and Apple cans its involvement with MacWorld. Read more »

    -- posted by Staff

What's on?