Reading Notebook: 08-September-09
Comments in italics are mine and express my own views, thoughts and opinions
The .NET Developer’s Guide to Windows Security by M. Brown:
The principle of least privilege as software construction mindset (pp. 17 - 18)
Close a resource as you finish to avoid security intra-context leaks (p. 18)
Always think about failure (p. 23)
Multifactor authentication (p. 25) - Useful mnemonic HKM (Have, Know, Made of)
Default modes in Kerberos and SSL: client to prove identity and server to prove identity (p. 26)
Did you complete identity proof by checking GUI details? (p. 26)
The luring attack (p. 27)
“Security Is a Process, Not a Product” by B. Schneier (p. 32) - Thinking analogically, regarding supportability, software engineers need to write maintainable code with a support engineer in mind.
Software Requirements & Specifications by M. Jackson:
Need to read this book to refresh my past software design and architecture knowledge
Software development as logic and math, as socio-ethical challenge, as labour employment relations, as problem in manufacturing control, as engineering (p. 1) - I see it as memory changes
Distinction between machine and app domain: how and what (p. 1) - Modeling?
Requirements are in app domain (p. 2)
The importance of explicit and precise domain descriptions (p. 2)
Modeling is always incomplete, coincidental similarity of many OO descriptions to the real world (p. 3)
Specification as interface description between machine and app domain (p. 3)
Scope vs. Span: classes vs. areas (pp. 3 - 4)
Partial descriptions as separating concerns (p. 4)
Moods in description: optative (what we want) and indicative (is) (p. 4)
The importance of problem frames and multi-frame problems (pp. 4 - 5)
- Dmitry Vostokov @ SoftwareGeneralist.com -
_1125.png)
Coming Soon:
Management Bits: An Anthology from Reductionist Manager
Debugging Notebook: Essential Concepts, WinDbg Commands and Tools
Crash Dump Analysis for System Administrators and Support Engineers
New Magazines:
Debugged! MZ/PE: MagaZine for/from Practicing Engineers
New Books:
Memory Dump Analysis Anthology: Color Supplement for Volumes 1-3
Memory Dump Analysis Anthology, Volume 3
First Fault Software Problem Solving: A Guide for Engineers, Managers and Users
x64 Windows Debugging: Practical Foundations
Also available:
Windows Debugging: Practical Foundations
DLL List Landscape: The Art from Computer Memory Space
Dumps, Bugs and Debugging Forensics: The Adventures of Dr. Debugalov
WinDbg: A Reference Poster and Learning Cards
Memory Dump Analysis Anthology, Volume 2
Memory Dump Analysis Anthology, Volume 1
New Children's Book:
