> It is the missing regulation Not just regulation - we also need proper liability. If the product you sell causes damage (for whatever reason - security vulne

> It is the missing regulation Not just regulation - we also need proper liability. If the product you sell causes damage (for whatever reason - security vulnerabilities included) then the manufacturer need to be liable. Just like every other industry. Some people will complain this will make current software development practices impossible. I join with Dan Geer and PHK's considered reply[1]: Yes, please! That was exactly the idea. [1] http://geer.tinho.net/geer.blackhat.6viii14.txt http://geer.tinho.net/geer.blackhat.6viii14.txt