3 ms·
I'd argue that these are lagging indicators. The code that's deployed and being exploited now was written years ago, using languages and tools developed decade
by cvwright 10y ago
I'd argue that these are lagging indicators. The code that's deployed and being exploited now was written years ago, using languages and tools developed decades ago.
If you read to the end of the article, it discusses recent DARPA projects that are addressing the tools and languages component. And most of this stuff is still in heavy development. Even assuming that we get it sorted out soon, it will still be years and years before most deployed software is built on these improved foundations.
So yes, things are starting to get better. But it will take a long time before we see the results.
- tyingq 10y agoPerhaps. Those tools, though, don't fix issues like default admin passwords, admin interfaces that listen on 0.0.0.0, and so forth. It's a fairly big jump for me to see the low end vendors adopting high end techniques when they don't even use ancient best practice.