Mariela Gunn
Office: PAR 102
Hours: M 4-5 & Th 10-12
+ individual appointments
Sue Companies, Not Coders
Sue Companies, Not Coders - A former U.S. cybersecurity czar now advocates holding programmers liable for the security holes in their code. He's soooo close to getting it right. Commentary by Bruce Schneier. [Security Blanket]
Companies should be the one’s that is held liable for buggy and insecure programs, not the programmers that work for them. Only then would they actually release programs that work correctly and is secure, and not release programs known to be faulty, expecting to release patches for said programs later on. Since software companies have no real incentive to release secure programs right off the bat, other than the avoidance of the occasional bad publicity, they will continue to sell insecure programs. With the threat of litigation, software companies will find that it would be more profitable to spend the time and money to make more secure programs, than to have to face lawsuits from unhappy customers.
The problem of insecure software has gotten worse and worse over the years, especially with the advent of the Internet. The Internet allows a way for hackers to get on your computer and to exploit a flaw in a program in your computer to do malicious deeds. Also with the Internet, companies know that it’ll be a lot easier to distribute patches now that they can do it online, so companies know they can just release a patch online if their software is flawed. This has the effect of companies being less concerned about the quality of their software and so they spend less time debugging before selling the program.
Even when there is a program that is continuously insecure, for example Microsoft’s Internet Explorer, usually the company has such a monopoly on the market that it would be inconvenient for users to switch to another program, so they just accept the faulty program because they have no alternatives, or is unwilling to try another program because they’re afraid to learn how to use a new program. The companies might also have a good public relations team, so that they can spin whatever new flaw that’s found on their software into something less damaging to the company’s image.
