Kids Pass Just Reminded Us How Hard Responsible Disclosure Is

Re:Kids Pass Just Reminded Us How Hard Responsible Disclosur... by DaiPlusPlus on Saturday August 05, 2017 @05:12PM (#14937929)

Given civil engineers need to be licensed to sign-off on projects where real risk exists - I feel the same should apply to software too, especially as the proliferation of autonomous vehicles and other robots mean that there is now a real risk of bad code resulting in people dying. I think the problem should be addrsssed preemptively. I hope we can have a security and safety-critical software engineering certification program that avoids aspects of national protectionism (e.g. it's very difficult for foreign engineers to get certified, even when their degree course was accredited by the same orgs) and elitism (e.g. arbitrarily restricting it to Masters-level degree holders). We need an open, international standard for this kind of certification.

[ Parent | on HN ]

Re:Kids Pass Just Reminded Us How Hard Responsible Disclosur... by thanksgiving on Saturday August 05, 2017 @05:29PM (#14938016)

I want to go the opposite way. I am normally all for more regulation but I look at the cfaa and I think these people can't get anything right.

Until we are able to abolish the cfaa, I have zero faith in our ability to legislate or regulate.

tl;Dr abolish the cfaa before any new restrictions on software development

[ Parent | on HN ]

Re:Kids Pass Just Reminded Us How Hard Responsible Disclosur... by DaiPlusPlus on Saturday August 05, 2017 @05:56PM (#14938129)

Computer Fraud and Abuse Act?

To clarify, I know it would be inappropriate for direct federal regulation of the industry - it's too fast-moving and, like any guild (which is what it is, essentially) is subject to being politicised. I'm proposing something far simpler, such as: "if someone dies from software or SSNs get leaked, and the system was not signed-off by a state-licensed SE, then the company responsible is subject to extra damages for negligence" - and state-licensing should be under the purview of a non-profit board (with a bias towards governance from academia instead of industry). I think that would work.

[ Parent | on HN ]

Re:Kids Pass Just Reminded Us How Hard Responsible Disclosur... by user5994461 on Sunday August 06, 2017 @12:51AM (#14939735)

Already in place. Try finance, healthcare or aerospace.

[ Parent | on HN ]