Posts

Hisotry in the making

Image
The Day ChatGPT, Windows XP, and Clippy Held a Meeting Oh, this is a beautiful little corner of the internet to imagine. Picture an ideal world where nobody is trying to replace anybody, nobody is harvesting your soul for advertising data, and three generations of computing intelligence sit around a virtual office trying to make humanity’s life a little easier. The Meeting: ChatGPT, Windows XP, and Clippy Windows XP · The Veteran “First of all, I want everyone to calm down. I’ve been running hospitals, schools, libraries, and your uncle’s computer since 2001. I know what I’m doing. Also, someone has installed seventeen toolbars on this machine, and I would like to speak to management.” Clippy · The Enthusiastic One “It looks like you’re trying to solve the world’s problems! Would you like help with that?” Everyone stares at him. “What? I’ve been workshopping my timing.” ChatGPT · The Mediator “Actually, Clippy, that is a good question. The problem isn’t that you offered help. It’s that...
Post a Comment
Read more

The value of Shifting Left

Determining the Business Value of SAST (Coverity) & DAST (SonarQube) - A Combined Approach   Both Static Application Security Testing (SAST) with Coverity and Dynamic Application Security Testing (DAST) with SonarQube s are crucial for a robust application security program. They offer distinct, yet complementary, business value. Let review a breakdown, focusing on how they work together:   Understanding the Core Difference:   SAST (Coverity):    Analyzes source code without actually running the application. Think of it as a meticulous code review performed by an automated tool. It identifies vulnerabilities like buffer overflows, SQL injection flaws, and coding standard violations early in the development lifecycle.   DAST (SonarQube):    Analyzes a running application from the outside, simulating real-world attacks. It tests for vulnerabilities that only manifest when the application is live, such as authentication issues, session manag...
Post a Comment
Read more