I agree, lets sue the makers of Sendmail out of existence for making such an insecure product! Then we can move on to sue Sun for sadmin & all their other buffer overflows. How about suing the makers of Openssh? That?s a security product, it should be secure! How many issues has it had just this year?
Bugs are a part of software development. Get over it, if you open the door for some lawyer to sue every time a security bug surfaces, you will just end up with a lot of rich lawyers & no software industry. Or more likely yet, only the big software houses (Microsoft, IBM, Oracle) will be around. They are the only ones who will be able to afford the malpractice insurance. Open source will be open wallet. Be careful what you ask for.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/47/9243#9243