Software To Blame For Security Problems
News There's only one problem with software development these days, according to security analyst and author Gary McGraw: It isn't any good. McGraw, noted for his books on Java security, has a new book out that purports to tell software developers how...
[December 3, 2001, 10:39]
Flaw Found In MS Security Patch
News The stack holds all sorts of information (such as) local variables and pointers to places," said Gary McGraw, chief technology officer at Cigital, which discovered the problem. In its attempt to prevent a buffer-overflow attack, Microsoft...
[February 14, 2002, 14:04]
Spat Over MS 'flaw' Gets Heated
News I stand by my claim that that security mechanism is incorrectly designed," said Gary McGraw, chief technology officer for the firm. A security company's assertion that a feature in Microsoft's latest software tools has a flaw morphed on Friday into...
[February 18, 2002, 13:03]
Netscape Security Flaw Revealed
News Gary McGraw, vice president for corporate technology at RST, said the Netscape algorithm was "not an obvious sitting duck -- [the password] appears to be scrambled up in a good way, but it's not cryptographically strong.
[December 15, 1999, 14:06]
Did MS Bug Alarm Go Off Too Early?
News Gary McGraw, chief technology officer for Cigital, said the company followed the unwritten rules of responsible disclosure in the company's announcement. Absolutely not," McGraw said. In this case, however, McGraw said the tools were just announced...
[February 15, 2002, 9:05]

