Fixes in for critical IE, Windows flaws

TalkBack 10 of 65:

Next »

« Previous

• Thread View
• Flat View

I agree, but it probably could be improved

I agree that the software is very complex, and there are bound to be bugs which have to be patched.

On the other hand, having worked as a professional programmer for thirty-five years I know that often there is not enough time taken for design and code reviews. There is not enough test coverage in regression tests. Often tools that have existed for years are not used to help eliminate buffer overruns and other well-known security holes. Sometimes it is because these tools are (typically) very expensive. Other times because the programmer does not know about them, does not use them, or they generate so many warning errors
that the programmer decides they are not all worth fixing.

Often software is written to be "easy" for people to use, but sometimes this ease allows people to exploit the mechanisms for this ease of use and create security holes.

I believe that we are seeing this ever-increasing number of viruses and security exploitations for a couple of very simple reasons:

The software (as Poser says) is very, very complex, and is getting more complex.

The Internet allows millions of people to look for and devise new exploits, then apply them to millions of systems very fast.

Unless we improve the coding techniques dramatically, it will only get worse, as even
more of the earth's population gets onto the net.

No real solution, just observations.

md

Posted by: maddoghall   Posted on: 06/14/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Building the Virtualized Enterprise with VMware Infrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now
• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now