Ho ho ho

Went to the Mission Santa Parade last night. Weather was great, and made the event much better than last year... since we were soaked and miserable with the rain last time. I don't mind parades, but I wish the damn rigs would refrain from using their horns so much. I get quite a headache from the noise.

Been thinking more and more about security tests. The entire process of providing that within the build environment, and applying the test to each build. Some others in the security industry have been interested as well, and I think I might end up starting a free web site to collect this sort of information, and let others get free access to generic security tests they could apply to their environ
ments. Be it Java, C/C++ or even some web services in ASP or the likes, these could be very benefitial tests. Ranging from user validation tainting in fields, to rogue servers to stress-test socket implementation, this could be a nice site for all of us to use.

Been getting to spend more time talking with Michael Howard over at Microsoft in the Secure Windows Initiative and we got into the philosophies of least priviledge and the top 10 security tips he always flogs on the Microsoft campus, and how that relates to education in the workplace. The "Developer Boot camp" they did was riddled with common things people take for granted daily. If you haven't read his article on the top 10 tips you should do that now.

We have people coming over tonight, so I need to run to the store and pick up some snacks etc. Eating better makes it extremely difficult to entertain in the snack department, when you don't HAVE any party snacks in the house. I am a salsa and baked nacho chip kinda guy. Kinda boring. As such, I'm outta here to go get some meats and cheeses to add to the veggie plate. TTYL.