3 ms·

We are in the mess we are today because everybody think "I don't think it's my job". I have seen programmers much technically stronger and experienced than I a

• jokoon 11y ago
  > We are in the mess we are today because everybody think "I don't think it's my job". You're right, but we're in this mess because there isn't clear knowledge about security nor there is education teaching security on a software engineering side. There aren't simple standards and practices. Hacking a machine is not taught and you won't find tutorials for it, maybe because it's just plain outlawed. Security is boring, and it's not rewarded. There is no insurance market for software security. If you compare it with real life security, there aren't that many people thinking about scenarios other than police forces, the FBI, insurances, and architects of buildings. My opinion is that it's a very sensitive sector because government will always try to have the monopoly on security for obvious reasons. Linus is one guy, he doesn't have time to care. All he can do is have a sound kernel design, and that might be much enough. Maybe he can't deal with security like the NetBSD guys do. I really think security has many, many aspects, and you can't blame one software part for it. Security is all about mitigation, which will always resides on the user and the project engineers.