Writing Secure Code(Microsoft Press)

[Joseph_R_Thomas]

hi...
can anybody who has read the book 'Writing Secure Code' by Microsoft Press tell me if its a good book?
is it worth buying?
what can i learn from it???
does the book explain in Plain english or in code examples??
tks a lot

[Joseph_R_Thomas]

BTW : i am talking about the second edition:)

[Joseph_R_Thomas]

currently not many websites(other than amazon)are selling this book...is it still good to use???
even most of the shops in my country dont carry this book??
something wrong with the book???
does this book now has a successor that is replacing it??
tks

[Joseph_R_Thomas]

i also found another book called "Building Secure Software: How to Avoid Security Problems the Right Way"
does anyone have this book???
can anyone tell me the differ between this book and the first one???
tks a lot

[Andreas Masur]

Well...I did not read any of these...however, as far as I remember, the second one takes a more general approach - that is - not focussing on Windows.

Nevertheless, you find a review of the first one here (http://www.accu.org/cgi-bin/accu/rvout.cgi?from=0ti_w&file=w003345a)...

[Joseph_R_Thomas]

wow!!!
tks Mr.Masur...
i tried to find reviews but couldnt.....
tks a lot..
really helpfull:)

[Joseph_R_Thomas]

last question : whioch book would u recomend?????FOR ME??:)

[Andreas Masur]

Well...both books do not seem too bad, however, somehow I find it a contradiction that even Microsoft published a book about secure code... :confused:

Nevertheless, if I would need to choose, I most-likely would choose the second one... :cool:

On the other side...you can buy them as a bundle at Amazon (http://www.amazon.com/exec/obidos/tg/detail/-/020172152X/ref=pd_bxgy_text_1/104-8291330-0151963?v=glance&s=books&st=*)... :D

[Joseph_R_Thomas]

wow Mr.Masur.....
thank you soooooooooooooooooooo much for all your effort to find me the links......:cool:
tks a lot...
God Bless..

[Kheun]

I just did a check at the Book shop in Funan Centre (http://www.compbook.com.sg/) (in Singapore) and found that the 2nd edition is already available at S$86.

I only read through the first edition. I think it is pretty good. The first few chapters covers general secure code stuff, like prevent buffer overflow. As for the rest of the chapter, it is more focus on Window's API for encryption/decryption. Nevertheless, most of the ideas are applicable else where.

[Joseph_R_Thomas]

hi, i checkd funan too...its pretty expensive:( i checked in Kinokuniya at Ngee ann city and also borders..
kinokuniya doesnt ahve it...
and borders they dont pick up the phone...:(
ia m palnning to buy both the books...
you think amazon is cheaper than the two books in singapore???
amazon is charging 90.30 us $ for both the boosk including delivery charges...
what do u think mr.Kheun??

[Kheun]

"Building Secure Software: How to Avoid Security Problems the Right Way" cost S$68 which totals up to S$154.

Assuming the conversion rate is still at 1.7533, total charge for delivery from Amazon, US$90.30 * 1.7533 = S$158.32.

I think they are roughly the same as long as the conversion rate remains. Probably, the only difference is that you have the books slightly later. :)

Edit:
PS. It will be cheaper if you buy more books.

[Joseph_R_Thomas]

problem is ...they are cheaper only if the delivery in in U.S..outside U.S they dont offer it cheaper....:(

[Andreas Masur]

Originally posted by Joseph_R_Thomas
problem is ...they are cheaper only if the delivery in in U.S..outside U.S they dont offer it cheaper....:(
Well...that is understable in regard to the higher delivery costs isn't it?

Anyway, I also would suggest not to buy at Amazon since it will simply increase the costs. Nevertheless, don't you have a local Amazon i Singapore? Like we do in Germany. There you can buy the English version of the books as well and the delivery costs are low since they ship it locally...?

[Joseph_R_Thomas]

we dont have a amazon here....:(
we only have borders and the prices are a killer...
can u believe it i bought MFC Unleashed from borders for S$94 and the next day found the same book for $18..:(
OMG i still cant believe it.....:(

[Kheun]

Yeah, we don't have many choices in Singapore. Joseph, have you approach some of your school-mate from India? I heard that technical books over there are a lot cheaper. :D

[Joseph_R_Thomas]

my father is in india....and he did check out for me.......in india we only have the first edition of writing secure code ..we dont have the second one...moreover we dont have the book builing secure software at all...:(
at least in singapore we can find any book at all...:)

[hometown]

Originally posted by Kheun
Yeah, we don't have many choices in Singapore. Joseph, have you approach some of your school-mate from India? I heard that technical books over there are a lot cheaper.
:(