The onus should be on the software and security industry - those that are responsible for designing the products - to make software which is not only safe to use by default, but easy to secure.

The problem with your approach is that security vulernabilities are just that, vulnerabilities. There is no "enable hackers into my pc" option to uncheck, people use weaknesses in the code and exploit unknown vulnerabilities. If software developers could make a "protect my pc from hackers" button, they would! Blame the managers, marketing and sales people of the companies that programmers work for that force them to release software on-time instead of when it is fully tested with no bugs!

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/262/28087#28087