-
Yes, I specified incompetent *in another field*. Not checking for integer overflows and relying on your program being run with a virtual memory limit for security instead is incompetence in the field of secure service programming. Sure, I trust him to write crypto code though.
This, by the way, makes *perfect sense* when you consider that writing secure crypto code is all about *minimizing* condition checks and branches and working with fixed sized data blobs, while writing secure app code is the exact opposite, checking and validating everything.
-
-
Which also means I also wouldn't want him anywhere an x509 parser or PKI implementatiom, but very happy to have him write the underlying crypto primitives :-)
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.