Re: OT: Australia may allow punitive damages for security vulns

2010-06-23 Thread Sunnz
2010/6/22 mark hellewell mark.hellew...@gmail.com: http://www.news.com.au/technology/no-anti-virus-software-no-internet-connecti on/story-e6frfro0-1225882656490 Illegal to run without antivirus ... disconnection of vulnerable computers. A much needed kick up the arse for software makers or

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Martin Schröder
2010/6/22 mark hellewell mark.hellew...@gmail.com: Companies who release IT products with security vulnerabilities should be open to claims for compensation by consumers, apparently. shrug/Doesn't seem like Apple cares. Best Martin

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Manuel Ravasio
Nobody at OpenBSD would claim that they could guarantee that there is no exploit waiting to be found in the OS. They just make better efforts than anybody else to reduce the chances. The errata page shows that they are forever responding to possible problems publically rather than

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Jacob Yocom-Piatt
mark hellewell wrote: http://www.news.com.au/technology/no-anti-virus-software-no-internet-connecti on/story-e6frfro0-1225882656490 Companies who release IT products with security vulnerabilities should be open to claims for compensation by consumers, apparently. Illegal to run without

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Adam M. Dutko
when ford sold the pinto with the 'exploding' gas tank, it just paid money out to settle claims after many people were burned to death. although i don't believe there is a precedent for it, possibly until now, many software companies have been doing the same thing: selling crap products that

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Jan Stary
one way to look at the explosion of software development in the past 30-40 years is that it is an industry lacking sufficient regulation and thus a very lucrative area to do business. because there is no regulation you can get some random idiot in whatever country to write your code

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Chris Bennett
Adam M. Dutko wrote: when ford sold the pinto with the 'exploding' gas tank, it just paid money out to settle claims after many people were burned to death. although i don't believe there is a precedent for it, possibly until now, many software companies have been doing the same thing: selling

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Stefan Wollny
one way to look at the explosion of software development in the past 30-40 years is that it is an industry lacking sufficient regulation and thus a very lucrative area to do business. because there is no regulation you can get some random idiot in whatever country to write your code

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Adam M. Dutko
I disagree with this. How many times a year are motor vehicles recalled? They don't replace the car, they fix it. Why can't defective software get a recall or a hefty fine if they refuse to fix it? This is a major reason I walked away from the paid software world, impossible to pay for

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Marco Peereboom
On Tue, Jun 22, 2010 at 08:44:45AM -0400, Adam M. Dutko wrote: when ford sold the pinto with the 'exploding' gas tank, it just paid money out to settle claims after many people were burned to death. although i don't believe there is a precedent for it, possibly until now, many software

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Adam M. Dutko
This is obviously not the intent. The intent is to have software that is reasonably crafted by software engineers. Not some slapped together turd with peanuts from different development teams. I agree it shouldn't be slapped together but you strike upon an interesting debate... Should

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread VICTOR TARABOLA CORTIANO
http://www.news.com.au/technology/no-anti-virus-software-no-internet-connecti on/story-e6frfro0-1225882656490 Companies who release IT products with security vulnerabilities should be open to claims for compensation by consumers, apparently. Illegal to run without antivirus ...

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Marco Peereboom
On Tue, Jun 22, 2010 at 01:23:14PM -0400, Adam M. Dutko wrote: This is obviously not the intent. The intent is to have software that is reasonably crafted by software engineers. Not some slapped together turd with peanuts from different development teams. I agree it shouldn't be

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Chris Bennett
Marco Peereboom wrote: Microsoft spends $10B on RD. That is nearly the ENTIRE budget of NASA. They are the classic example of organizations that are completely out of control and rely entirely on some process that is good enough. Anyone who has written code that directly interacts with their

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread E.T
One hangover :) On Tue, 22 Jun 2010 13:24:43 -0500, Chris Bennett ch...@bennettconstruction.biz wrote: Marco Peereboom wrote: Microsoft spends $10B on RD. That is nearly the ENTIRE budget of NASA. They are the classic example of organizations that are completely out of control and rely

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Kevin Chadwick
On Tue, 22 Jun 2010 12:55:10 -0500 Marco Peereboom sl...@peereboom.us wrote: Getting a bunch of kids from college with some degree or another or outsourcing code is a recipe for disaster. If the developers have no vested interest in the success of the code a project will nearly always fail.

Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Theo de Raadt
How come the university acting as proxy, got so much of OpenBSDs DARPA grant? What was the justification? Graft, influence trading, and patronage are institutionalized in the relationship between universities, research grants, and the government in the US to roughly the same level as anywhere

OT: Australia may allow punitive damages for security vulns

2010-06-21 Thread mark hellewell
http://www.news.com.au/technology/no-anti-virus-software-no-internet-connecti on/story-e6frfro0-1225882656490 Companies who release IT products with security vulnerabilities should be open to claims for compensation by consumers, apparently. Illegal to run without antivirus ... disconnection of

Re: OT: Australia may allow punitive damages for security vulns

2010-06-21 Thread Adam M. Dutko
Illegal to run without antivirus ... disconnection of vulnerable computers. A much needed kick up the arse for software makers or just bat-shit insane? Coming soon... I tend to agree with your last comment. begin article summary Idiotic politicians with no business setting arbitrary rules

Re: OT: Australia may allow punitive damages for security vulns

2010-06-21 Thread Rod Whitworth
On Tue, 22 Jun 2010 14:52:30 +1000, mark hellewell wrote: http://www.news.com.au/technology/no-anti-virus-software-no-internet-connecti on/story-e6frfro0-1225882656490 Companies who release IT products with security vulnerabilities should be open to claims for compensation by consumers,