Just as they did last year, over thirty international security organisations have come together, to publish a list of the 25 most dangerous programming errors leading to vulnerabilities that can be exploited for cybercrime and espionage.

The 2010 CWE/SANS Top 25 Most Dangerous Programming Errors was published today listing the most widespread issues that lead to software vulnerabilities.
Mark Cox: "During the creation and review of the list we spent some time to see how closely last years list matched the types of flaws we deal with at Red Hat."

Experts from more than 30 US and international cyber security organizations jointly released the consensus list of the 25 most dangerous programming errors that lead to security bugs and that enable cyber espionage and cyber crime.

"Failure to Preserve SQL Query Structure (aka 'SQL Injection')" appears at number 2 in the CWE/SANS TOP 25 Most Dangerous Programming Errors list published on February 16. And for good reason: SQL injection attacks pose a massive potential threat to your organization.

The release of Ubuntu and other user-friendly distributions has bolstered Linux’s popularity among IT pros and end-users alike. Yet Linux neophytes can still stumble over common tasks, like installing new software. In this IT Dojo video, I discuss common mistakes people make when they’re trying to add new Linux software. I also give you tips to make the installation process a bit easier.

"The code that implements Arc illustrates many useful programming techniques. Some of the techniques occur multiple times, and can be considered idioms of Arc programming; techniques that can be applied to many problems. This article describes some of the most common idioms, and how they can be used in Arc programming.

New desktop users can make plenty of mistakes (as can anyone). But knowing which mistakes to avoid, from the start, helps prevent a LOT of frustration. I’ve handled the topic of mistakes new Linux admins make, but never those of desktop users. Here are some of the most common Linux desktop mistakes I see new users make.

Working at Lucid Imagination gives the opportunity to analyze and evaluate a great many instances of Solr implementations, running in some of the largest Fortune 500 companies as well as some of the smallest start-ups.

"The sections below develop reasons for adoption of free software exclusively for school education. Towards the end, a list of policy guidelines and recommendations are provided for discussion. The document does not cover the pros and cons of using ICT for education. I will try to intervene during the deliberations on these issues. Why Free Software for education? ..."