2 ms·
Then punish defects. Give programmers the freedom to define their semantic space, but make sure to punish profit-seeking entities for insecure behavior. It's no
by Karrot_Kream 5y ago
Then punish defects. Give programmers the freedom to define their semantic space, but make sure to punish profit-seeking entities for insecure behavior. It's not that simple of course (it's easier for FB to pay a fine than a startup, for example), but we need to enforce the cost of defects at the organization level. I mean, there's also a world where FB apologizes about how they "forgot" to remove `unsafe` from a part of Rust code.
- pjmlp 5y agoDefinitly, liability needs to happen, sledgle with lawsuits hammer any company that doesn't take security seriously.
- throwaway210222 5y agoSledge with lawsuits and company that knowingly buys uncertified software. Like the FAA does. Never, ever going to happen in enterprise and consumer software.
- pjmlp 5y agoIt already happens when that enterprise and consumer software is deployed in high integrity computing scenarios.