March 08, 2004

Exploiting Software:How to break code

Sorry for the lack of posts. Quite swamped here lately with some of my own work.

Stuck my head out for a bit and saw an interesting post from Gary about the fact one of his sample chapters from his book (Exploiting Software: How to break code) is online for your reading pleasure.

I took a quick read through the chapter over lunch, and I must say it looks REALLY good. I am going to need to add it to my list of books to pick up on my next reading frenzie. I am actually heading out in a couple of weeks to relax on a nice secluded island away from computers for a few days... and I might just take Gary's book with me (assuming I get it in time of course)

Anyways, you can head over to Amazon to order your copy today! Let me know what you think of it if you read it in the next week or so, just in case my expectations are too high. (I doubt it, Gary is a kewl guy)

Now to wrestle with a big delimma.... do I order and read Security Warrior first, or Exploiting Software: How to break code?

What do you think?

Posted by SilverStr at March 8, 2004 06:17 PM | TrackBack
Comments

I have Security Warrior and have been reading that one, anticipating the arrival of Exploiting Code (maybe it came today -- need to get home and check?!). To me, they are taking very similar approaches, and both are very worthwhile reading. When I have both in my hands, I will let you know, but the Buffer Overflows sample chapter I read from Exploiting Software looks great.

This is also sample chapter available for Security Warrior that I point to from my blog: http://weblogs.asp.net/rhurlbut/archive/2004/02/13/72857.aspx

Posted by: Robert Hurlbut at March 8, 2004 06:35 PM

Security Warrior has a lot of interesting stuff that doesnt' really apply to coding. I imagine Exploting Software will have more info you're looking for.

Posted by: Jason Mauss at March 8, 2004 06:42 PM

I just started reading Exploiting software two days ago, and so far it has been an excellent read. I am really looking forward to getting the time to finish it.

Posted by: James Edelen at March 9, 2004 06:46 PM

Well duh. Get Exploiting Software! Or at least don't ask the authors their opinion.

gem (the guy who wrote Exploiting Software)

Posted by: Gary McGraw at March 10, 2004 02:34 PM

Hahaha. Well you know.. as the author you could SEND me a copy (personally autographed of course) to review :)

Posted by: SilverStr at March 10, 2004 02:46 PM

I received my review copy last week, but I haven't had a chance to read it yet. From the table of contents and flipping through it, it looks like an excellent book. I hope to find time to read it next week.

Posted by: James Walden at March 10, 2004 03:25 PM

Ok. You're on. Send me your snail mail address and I will get you a copy.

gem
from my treo

Posted by: Gary McGraw at March 10, 2004 04:29 PM

Done deal.

I look forward to reviewing it!

Posted by: SilverStr at March 10, 2004 04:52 PM