No I do not only hold Microsoft accountable, they unfortunatly for us are what most people use. All programers should be held accountable for their code. No you can't test for every possible vulnerablity, but almost every vulnerability found to date is buffer overflow related. That is detectable and easily found when testing new code. It is still a matter of laziness and allowing the CxO to dictate how much time is spent on coding.

Using the analogy, it would be the same as the auto industry not testing a vehicles ablility to handle rough roads. They know every vehicle is going to encounter rough roads. So they test the vehicle to be sure it can handle bumps.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/141/18111#18111