Musings of a Software Development Manager

Learned a new term today going through 19 Deadly Sins of Software Security. They give an example of a URL containing a strange looking id parameter:
1www.xyzzy.com?id=TXkkZWNyZStwQSQkdzByRA==
Turns out a simple run through a base64 decoder for gives you:
1My$ecre+pA$$w0rD
The authors then refer to this as an “encrapted” password.

I’m digging into Software Security: Building Security in by Gary McGraw and I came across a strong opinion on C and C++:
If you are concerned about buffer overflow problems and other basic software security bugs, don’t use C. If you must use C, use a source code security scanner. By the way C++ [...]

During a short conversation with our new Chief Security Officer he explained:
If we can certify that we have a secure software development life-cycle we stand to increase our overall revenue with clients from 10-20%.
Wow, actually utilizing our methodology as a competitive advantage. Typically if I mention methodology to anyone on the business side and [...]