Dangerous coding errors revealed

[NickFitz]

Wot!

Who the **** are they using as programmers, 12 year olds?

tim

What do you mean? This is an analysis of security vulnerabilities found in the wild, not mistakes the NSA have made.

FWIW I found one of these errors (script injection vulnerability, to be precise) just before Christmas, on a prominent website owned by a well-known web entrepeneur, with people whose names I recognise as highly experienced programmers on the development team.

The same vulnerability has, at various times, affected Microsoft, Yahoo, Google, American Express, and just about every other well-known company you can think of.

Even the best developers can slip up and let one of these mistakes through.