http://news.thomasnet.com/imt/2013/07/15/is-a-professional-e...
This idea that all other engineers have a PE is rampant in the software field, but it's just not true.
Most software engineers don't provide services directly to the public either, but licensure would a necessary first step to regulating the field.
I don't think it's a good idea to require licensing for most software engineers, but I think this specific concern is not actually a significant issue.
1) Quite simply, software is much easier to learn than medicine, so you have a larger supply of capable software engineers than doctors. If the market for their services is being artificially suppressed, they will gravitate to wherever their services can make money.
2) There is a black market for medical services. Ever heard of a back-alley abortion?
The black market for exploits is already very lucrative. Devs willing to take that money are probably doing so already.
> There is a black market for medical services. Ever heard of a back-alley abortion?
Back alley abortions exist mostly because of restrictions on legal abortions, not because doctors aren't allowed to practice without license.
Or he can, as long as he only writes static HTML and not a line of javascript, or he can do that as long as she doesn't pay him even a nickel or a free quilt?
It's mind boggling to me that you'd even make this argument...taxes aren't even a good example. I can officially do my own taxes and I'm not an accountant. So would the aunt have to "unofficially" have her nephew write the code, then pretend to have written it herself and everything is fine? That's currently legal with taxes - I help my own family with them.
Furthermore, ask me how often I'm seen a company get hacked that had ISO 27001 certification from a security firm with more letters after their names than employees.
It makes sense to require some sort of accreditation for systems that must be failsafe against significant financial, legal, or physical harm. But it doesn't make sense to require it for the digital equivalent of a backyard shed.
And even safety-critical systems don't require the force of law.
I develop embedded software for safety-critical systems. There is no force of law governing that in the US, but there are industry-recognized service providers that will evaluate your design and provide a certificate affirming that it adheres to specific standards such as ISO13849 and IEC61508. No-one in this industry will buy an uncertified product, despite no law telling them they have to. There is no need to create a law that will have massive unintended consequences.