A banner year for software bugs | Tech News on ZDNet

[mshines at purdue.edu (Michael S Hines)]

... the patch process is not the answer....

And neither is adding new features when the old ones don't work.
It's time to major on the majors, and quit messing with the minors.
Give us features that work (do what they should do, and don't do what they
should not do) - not just more features.

Who cares if your icons have round or square corners - if someone else can
take over your machine?

Mike Hines
mshines at purdue.edu

-----Original Message-----
From: sc-l-bounces at securecoding.org [mailto:sc-l-bounces at securecoding.org]
On Behalf Of Kenneth Van Wyk
Sent: Wednesday, October 11, 2006 10:38 AM
To: Secure Coding
Subject: [SC-L] A banner year for software bugs | Tech News on ZDNet

So here's a lovely statistic for the software community to hang its hat on:

http://news.zdnet.com/2100-1009_22-6124541.html?tag=zdfd.newsfeed

Among other things, the article says, "Atlanta-based ISS, which is being
acquired by IBM, predicts there will be a 41 percent increase in confirmed
security faults in software compared with 2005. That year, in its own turn,
saw a 37 percent rise over 2004."

Of course, the real losers in this are the software users, who have to deal
with the never ending onslaught of bugs and patches from their vendors.
We've just _got_ to do better, IMHO, and automating the patch process is not
the answer.

Cheers,

Ken
-----
Kenneth R. van Wyk
KRvW Associates, LLC
http://www.KRvW.com