[dead]
Re:Some thoughts on security after ten years of Qmail 1.0
by oblio on Wednesday January 17, 2018 @05:07AM
(#16166791)
In a sense, software engineering is quite mature. It's probably matured a lot faster than most other engineering branches.
We know about static analysis, fuzzing, unit testing, integration testing, functional testing, Continuous Integration/Deployment/Delivery, etc., etc.
It's just that maturity costs a lot of money. 95% of the software produced just doesn't need that and the client can't even afford it.
Re:Some thoughts on security after ten years of Qmail 1.0
by pjmlp on Wednesday January 17, 2018 @09:22AM
(#16168056)
Most people also cannot afford to buy cars or houses in one go, yet regulations don't get ignored because of them.
Re:Some thoughts on security after ten years of Qmail 1.0
by oblio on Wednesday January 17, 2018 @09:35AM
(#16168146)
There is almost no way we can compare cars and houses with the average CRUD software, in terms of damage they can do to a person.
More than that, even in the case where damage does happen, most people would rate physical damage higher than non-physical damage, for example monetary loss.
So many of the great (financial) success stories of our sector are about startups stumbling into an untapped demand, and then running with it for as long as the money lasts. Nobody sets out to build a bridge – they build a 2x4 plank, and then realize that rather a lot of people want to walk on it.