Some thoughts on security after ten years of Qmail 1.0

Re:Some thoughts on security after ten years of Qmail 1.0 by oblio on Wednesday January 17, 2018 @05:07AM (#16166791)

In a sense, software engineering is quite mature. It's probably matured a lot faster than most other engineering branches.

We know about static analysis, fuzzing, unit testing, integration testing, functional testing, Continuous Integration/Deployment/Delivery, etc., etc.

It's just that maturity costs a lot of money. 95% of the software produced just doesn't need that and the client can't even afford it.

[ Parent | on HN ]

Re:Some thoughts on security after ten years of Qmail 1.0 by pjmlp on Wednesday January 17, 2018 @09:22AM (#16168056)

Most people also cannot afford to buy cars or houses in one go, yet regulations don't get ignored because of them.

[ Parent | on HN ]

Re:Some thoughts on security after ten years of Qmail 1.0 by oblio on Wednesday January 17, 2018 @09:35AM (#16168146)

There is almost no way we can compare cars and houses with the average CRUD software, in terms of damage they can do to a person.

More than that, even in the case where damage does happen, most people would rate physical damage higher than non-physical damage, for example monetary loss.

[ Parent | on HN ]

Re:Some thoughts on security after ten years of Qmail 1.0 by pjmlp on Wednesday January 17, 2018 @10:16AM (#16168549)

Surely we can, it is all a matter of what CRUD software is managing.

There are institutions that rate what the damage actually means.

[ Parent | on HN ]