Would hold only Microsoft accountable your high standards? How about code written 10, 15, 20 years ago? Is it still liable? Have you devised a way to test code for every possible vulnerability, known and unknown? How would you design code for an yet to be created attack?

Using your analogy, the auto industry issues recalls from time to time to fix defects found after production, such as replacing a bolt, which failed to perform as designed. How is this any different than what software vendors do? You are implying they produce perfect vehicles, which never need updates, patches or fixes. Hmmmmm, better think it through again, your analogy is flawed

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/141/18097#18097