Re:A Famed Hacker Is Grading Thousands of Programs
by raesene9 on Sunday July 31, 2016 @01:22PM
(#12197819)
The problem is the externalities of insecurity. The company who is insecure doesn't suffer all the consequences of a security breach, so they don't spend as much money to mitigate it.
If software security was similar to say building/fire safety or food safety where serious cost/legal consequences were attached to failures, we'd likely see more spending...
Re:A Famed Hacker Is Grading Thousands of Programs
by moron4hire on Sunday July 31, 2016 @04:53PM
(#12198799)
That's exactly what I said, "we are as secure as is cost-effective".
Though maybe not. Maybe security isn't as big of a deal as we think. It's not like the world is ending. So many people are so incredibly insecure that you'd think more would come out of it and people would be incentivized to become more secure. There is a sense in which we are as secure as is cost effective.