Top 25 coding errors

[LMN]

Hi,

if you didn't notice it by now:

http://www.sans.org/top25errors/

I personally think input validation is most critical. What do you think?

Regards,
LMN

[JohnnyTheDon]

I personally think input validation is most critical. What do you think?

It definitely is. As a close (and related) second, I would have to pick buffer overflows. They're potent little bastards when pulled off correctly.

[Firestryke31]

It definitely is. As a close (and related) second, I would have to pick buffer overflows. They're potent little bastards when pulled off correctly.

I remember reading about a 420 (approx.) byte virus that nearly shut down the internet for about 15 minutes by using a buffer overflow error in some MS server software. Of course, IIRC this happened when most of the people in the affected regions were asleep, so it wasn't as bad as it could have been.

I wish I could remember where I read it, because they gave an opcode by opcode dissection of the source of the virus, which was cool.