3 ms·
>You provide a warranty that states exactly what is covered and what not (and suitability for a particular purpose, which software licenses often deny completel
by learc83 14y ago
>You provide a warranty that states exactly what is covered and what not (and suitability for a particular purpose, which software licenses often deny completely).
So software vendors state in their warranties that running this software on an internet connected device voids the warranty, and they stop offering patches and support. All support moves to unofficial third parties.
>They do, at least here in the EU you get differently rated safety doors at different prices. You know exactly what kind of minimum resistance they offer.
And that's an objective quantifiable measurement. Levels of software vulnerability are not.
>Why should that make a difference? If you cannot handle the responsibility you have as a vendor, then don't be one.
That is stupid, no software vendor can harden consumer software meant to run on a desktop internet connected computer to the point that a large government agency can't find a vulnerability.
- lazyjones 14y ago> That is stupid, no software vendor can harden consumer software meant to run on a desktop internet connected computer to the point that a large government agency can't find a vulnerability. I don't buy this. If the vulnerability is in the OS or some other program, those parts are to blame. But it's perfectly possible to avoid the mistakes that are typically employed for such intrusions (usually they are in the OS anyway - you know, the OS with no warranty, no accountability, but a monopolist price). When they aren't, it was usually some mediocre C programmer's sloppy coding (there are safer languages for mediocre programmers). The whole point of such regulations would be to put some pressure on developers so they must choose proper tools, languages, methodologies to keep customers from harm, whereas now they simply do what they like with no consequences.