Re:Book Review: "This Is How They Tell Me the World Ends"
by tptacek on Thursday February 25, 2021 @07:26PM
(#26270153)
I think the end of your second paragraph is a good way to put it. I think you could get to 1998 securely, for what it's worth, but your expense number seems dead-on.
Nate Lawson used to tell me (I assume he'd still tell me) that companies trying to ship secure software need to budget 10x for verification what they do for implementation. The best companies in the world don't even budget 1x. I'm not sure it's reasonable to ask them to. I think we'll know stuff in 10 years that will change how we look at things.
Nate Lawson used to tell me (I assume he'd still tell me) that companies trying to ship secure software need to budget 10x for verification what they do for implementation. The best companies in the world don't even budget 1x. I'm not sure it's reasonable to ask them to. I think we'll know stuff in 10 years that will change how we look at things.