Dangerous coding errors revealed
The US National Security Agency has helped put together a list of the world's most dangerous coding mistakes.
The 25 entry list contains errors that can lead to security holes or vulnerable areas that can be targeted by cyber criminals.
Experts say many of these errors are not well understood by programmers.
According to the SANS Institute in Maryland, just two of the errors led to more than 1.5m web site security breaches during 2008.
Here are some examples, see the original articles for the full listing;
CWE-20: Improper Input Validation
CWE-116: Improper Encoding or Escaping of Output
CWE-89: Failure to Preserve SQL Query Structure
CWE-79: Failure to Preserve Web Page Structure
CWE-78: Failure to Preserve OS Command Structure
CWE-319: Cleartext Transmission of Sensitive Information
-----
Thought I would pass this along.
