What I never hear in any of these articles or discussions is the lack of any type of enforcement system to punish and stop those individuals who perpetrate computer crimes. Exploiting a security vulnerability should be a crime punishable by some severe measure. Instead, everything is always tilted toward the software maker to bullet proof their product to the hilt. Software is a complex beast that will NEVER be secure as long as humans create it.

I have a better chance of being hit by lightning than being caught and punished for creating and using an exploit to a software vulnerability. Where is the enforcement? Where is the punishment? The blame and/or responsibility does not rest solely on the software maker.

Better yet, where is honesty and honor anymore? We wouldn't need enforcement and punishment if we as a species had those traits. Those who exploit anything have no honor and don't deserve to exist period! I feel ashamed to be a part of such a world.


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/254/27440#27440