Re: Tu a faim de liens coquin...? (Vu sur @NetBSD-help)

http://www.laas.fr/~matthieu/cours/c-superflu/
http://www.owasp.org/index.php/Category:OWASP_Guide_Project (bon c'est pas trop C)
http://www.ruxcon.org.au/files/2006/unusual_bugs.pdf
http://nob.cs.ucdavis.edu/bishop/secprog/

$ ls secure-programming/
bishop-1979-the-transfer-of-information-and-authority-in-a-protection-system.pdf
bishop-1986-access-control-and-privacy-in-large-distributed-systems.pdf
bishop-1986-how-to-write-a-setuid-program.pdf
bishop-1987-sharing-accounts.pdf
bishop-1991-comparing-authentication-techniques.pdf
bishop-1992-anatomy-of-a-proactive-password-changer.pdf
bishop-1993-teaching-computer-security.pdf
bishop-1995-a-standard-audit-trail-format.pdf
bishop-1995-improving-system-security-via-proactive-password-checking.pdf
bishop-1996-writing-secure-programs.pdf
bishop-1997-computer-security-in-introductory-programming-classes.pdf
bishop-1997-property-based-testing-a-new-approach-to-testing-for-assurance.pdf
bishop-1997-the-state-of-infosec-education-in-academia-present-and-future-directions.pdf
bishop-1997-writing-safe-setuid-programs.pdf
bishop-1998-robust-programming.pdf
bishop-1999-vulnerabilities-analysis.pdf
bishop-2000-academia-and-education-in-information-security-four-years-later.pdf
bishop-2000-education-in-information-security.pdf
bishop-2001-how-attackers-break-programs-and-how-to-write-programs-more-securely.pdf
bishop-dilger-1996-checking-for-race-conditions-in-file-accesses.pdf
delivering-signals-for-fun-and-profit.txt.gz
devanbu-et-al-1998-techniques-for-trusted-software-engineering.pdf
gilliam-et-al-2000-reducing-software-security-risk-through-an-integrated-approach.pdf
hashii-et-al-2000-supporting-reconfigurable-security-policies-for-mobile-programs.pdf
haugh-bishop-2003-testing-c-programs-for-buffer-overflow-vulnerabilities.pdf
peterson-et-al-2002-a-flexible-containment-mechanism-for-executing-untrusted-code.pdf
safe-cgi.txt.gz

(j'ai pas lu la moitié mais doit y avoir des trucs intéressants là dedans et doit y avoir moyen de retrouver chaque papier via Google)

Il existe aussi un certains nombre de blogs sur lesquels passent des exemples de code mal écrit qui sont fort instructifs ainsi que des exemples de bonnes pratiques de programmation.
http://blogs.23.nu/ilja/stories/13882/
http://taossa.com/index.php/2006/12/19/fun-with-impersonatio(...)
http://steve.yegge.googlepages.com/practicing-programming
http://blogs.msdn.com/oldnewthing/archive/2004/04/22/118161.(...)
http://www.joelonsoftware.com/items/2003/10/13.html
http://blogs.msdn.com/larryosterman/archive/tags/Software+En(...)
http://www.hacknot.info/hacknot/action/showEntry?eid=47
http://worsethanfailure.com/Series/CodeSOD.aspx

pertinent adj. Approprié : qui se rapporte exactement à ce dont il est question.