Comment edited comment... don't think you'll read it :( (Score 1) 284
So you think making level 5 DFD's and showing the clients is good for business? Did it help in securing the network enabled parts to be any safer? NOPE!
People are now coming UP from security by obscurity. This means that they're becoming security conscious. 2002-2005 witnessed the rise of spyware and spyware awareness together. Even MS, Symantec and McAfee call it a legitimate threat.
With the customers and users becoming more security conscious and aware, both developers and vendors turn a blind eye.
what was the last time someone actually TRIED to foolproof his code? Even if it was a bittorrent client...
NO developers pay ANY attention to this aspect, whether while coding, or while designing, or even when learning. (I can crash 100% of all programs created inside my univ. by first to third year students, within an hour... TC++ on DOS)
Vendors on the other hand, it has been correctly mentioned, that pay no attention to code security, stability, testing...
Result? Crappy code that dies on you.
Let's get Micro$oft bashing on..
It's partly the fault of compiler vendors like MS and borland too... NO tools are popularised to enhance stability, efficiency or security... It's ALWAYS new features this, connectivity that, .NET here, MSSQL there, J2EE over there...
People are now coming UP from security by obscurity. This means that they're becoming security conscious. 2002-2005 witnessed the rise of spyware and spyware awareness together. Even MS, Symantec and McAfee call it a legitimate threat.
With the customers and users becoming more security conscious and aware, both developers and vendors turn a blind eye.
what was the last time someone actually TRIED to foolproof his code? Even if it was a bittorrent client...
NO developers pay ANY attention to this aspect, whether while coding, or while designing, or even when learning. (I can crash 100% of all programs created inside my univ. by first to third year students, within an hour... TC++ on DOS)
Vendors on the other hand, it has been correctly mentioned, that pay no attention to code security, stability, testing...
Result? Crappy code that dies on you.
Let's get Micro$oft bashing on..
It's partly the fault of compiler vendors like MS and borland too... NO tools are popularised to enhance stability, efficiency or security... It's ALWAYS new features this, connectivity that,
