Re: Re: Code Red: What security specialist don't mention in warnings(Frank Knobbe)

[Tra <eudora-art () dogtownroad com>]

>>
>> It's not all that simple even with NASA though, remember the troubles with
>> the hubbles mirrors, and the peoblems with programing errors on various
>> probes to the sun and mars...
>
>I'm willing to bet if people's lives were on the line, it'd be different.
>
>Of course there are still engineering, management and general internal
>communication problems to overcome, not to mention deadlines... hence
>the explosion of Challenger...
>
>Darren

People's lives are on the line:

http://www.securitynewsportal.com/article.php?sid=1445

Click-wrap licenses and UCITA need to be addressed by the courts - software 
vendors must be held accountable (liable) for shoddy products.  Product 
liability insurance, settlements, fines, or more money spent on QA - the 
cost of bad* software is going to increase.


  - Art


* buffer overflows are to well understood to be considered accidents anymore.


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards