News for hackers. Stuff that matters.

A comment on U.S. Election Agency Breached by Hackers After November Vote. Parent comment

Re:U.S. Election Agency Breached by Hackers After November Vote by UncleMeat on Saturday December 24, 2016 @11:08PM (#13252849)
Yet researchers have actually investigated the problem of automatically generating prepared statements from existing code and it turns out to be weirdly challenging.

The problem isn't that some people are idiots. The problem is that we, as an industry, don't have great security solutions.

[ Parent | on HN ]
Re:U.S. Election Agency Breached by Hackers After November Vote by sasas on Saturday December 24, 2016 @11:13PM (#13252868)
In the words of Bruce Schneier - "Security is a process, not a product" [1]

Process that could help mitigate this bugs -

- Security / safe coding training

- Code audits

- Testing - static and dynamic

- Policies that are communicated such as "Always use prepared statements" or "use X framework"

[1] https://www.schneier.com/crypto-gram/archives/2000/0515.html

[ Parent | on HN ]