Stories
Slash Boxes
Comments

SoylentNews is people

Top-Ranked Programming Web Tutorials Introduce Vulnerabilities Into Software

posted by Fnord666 on Sunday April 23 2017, @08:33PM   Printer-friendly
from the then-again-it's-PHP dept.

MrPlow writes:

Submitted via IRC for TheMightyBuzzard

Researchers have checked 64,000+ GitHub projects, and found 117 vulnerabilities introduced through the use of code from popular programming tutorials.

Things like this are why I would never hire a professional programmer without an online portfolio of source code to check for Blatant Stupidity.

Source: https://www.helpnetsecurity.com/2017/04/21/programming-tutorials-vulnerabilities/

Original Submission

 
This discussion has been archived. No new comments can be posted.
Top-Ranked Programming Web Tutorials Introduce Vulnerabilities Into Software | Log In/Create an Account | Top | 46 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 2) by Scruffy Beard 2 on Monday April 24 2017, @02:00PM (1 child)

    by Scruffy Beard 2 (6030) on Monday April 24 2017, @02:00PM (#498839)

    I guess I disagree then. If there is one things computer are good at, but humans aren't, it is bookkeeping.

    The Computing science professors want to focus (at least in introductory classes) on the concepts they are teaching, rather than book-keeping.

    Not sure of the hard distinction you are making between CS and Math either. But in general, software has more complexity than one person can comprehend.

    Starting Score:    1  point
    Karma-Bonus Modifier   +1  
    Total Score:   2  

  • (Score: 2) by kaszz on Monday April 24 2017, @02:23PM

    by kaszz (4211) on Monday April 24 2017, @02:23PM (#498847) Journal

    Bookkeeping is to have a handler setup before you call a timer alarm or open the graphics driver before you try to draw some lines etc. Keeping plain variables in order just requires one to think first, and then code.