Re:TalkTalk cyber-attack: boy, 15, arrested in Northern Ireland
by cm2187 on Monday October 26, 2015 @08:14PM
(#10455373)
It's more akin to a bank not protecting their clients assets. It doesn't make the robber less of a criminal but doesn't make it ok for the bank.
Perhaps class actions against negligent companies with big payout would push their insurers to breath down their neck and would result in better security.
But make no mistake, the #1 problem is incompetence among developpers. I am sure it's not a direct order from the CEO to code in a way that leaves them exposed to sql injections. It doesn't cost more money to use a parameterized query. It's just that so many people call themselves developpers and simply just don't have a clue.
Perhaps class actions against negligent companies with big payout would push their insurers to breath down their neck and would result in better security.
But make no mistake, the #1 problem is incompetence among developpers. I am sure it's not a direct order from the CEO to code in a way that leaves them exposed to sql injections. It doesn't cost more money to use a parameterized query. It's just that so many people call themselves developpers and simply just don't have a clue.