This is the second half of an article I posted about using a checklist to prevent security errors. There, I said that you have 15 checklist items max, and you shouldn’t waste any of those questions on silly things like “Does the code follow the coding standard?”. Jason Cohen pointed to an article of his [...]
Read the rest of this entry »
Nutria is an online timelog. I’m hoping to start a live beta this week, initially light on features but with more to follow. I need some beta testers to give it a spin and provide feedback. Sign up to test and you will have my undying gratitude. Thanks!
Read the rest of this entry »
The 2009 CWE/SANS Top 25 Most Dangerous Programming Errors has been out for a while now. Maybe you’ve already eliminated all of these errors from your code. In case you haven’t, this post will help you develop a checklist that you can use to eliminate these errors starting at the architecture level and moving through [...]
Read the rest of this entry »
The only good way to create any kind of a reliable estimate is by using (your own) historical data. If you are trying to create an estimate for a new project and are having a hard time, don’t lament your lack of historical data. The best thing you can do is to set up a [...]
Read the rest of this entry »
Do time tracking tools have a low uptake because it’s tedious to enter your activity data? What do you use to enter time / activity data into your tracking tool? If you don’t use time tracking, is there a specific reason or is it just not something you’ve considered? What if you could enter activity [...]
Read the rest of this entry »
If you’re on Windows and you had problems installing Cygwin, there is another package that includes GCC called “MinGW” (minimalist GNU for Windows).
Read the rest of this entry »
There are two kinds of great software development tools.
Read the rest of this entry »
Some may argue that C is an outdated language to learn in 2009. I disagree. Learning C requires some degree of understanding how computers really work. And if you can understand pointers, you’re ten steps ahead of the game. This is the first in a series of articles designed to help the reader learn the [...]
Read the rest of this entry »
(Apologies to Stephen R Covey for the title…) Through some odd coincidence these posts crossed my path recently: Check In Early, Check In Often [comments here are especially good] Best Practices for Version Control 5 SVN Best Practices Continuous Integration is an Attitude, Not a Tool What I got to thinking about is that version [...]
Read the rest of this entry »
This is a round-up of continuous integration tools, in no particular order. CruiseControl: Open source, Java-based. Focused on build. Cruise: Commercial. Build/test/deploy/release. Works for most platforms and languages. Free for small and open source teams. CruiseControl.NETOpen source rewrite of the original CruiseControl for Java. Hudson: Open source, Java-based, runs as servlet. Supports build and test. [...]
Read the rest of this entry »
From The Peanut Gallery