Slashdot Mirror
Liability and Computer Security
Pelerin writes "In the latest
Crypto-Gram,
Bruce Schneier has written an interesting essay with some thoughts about the current lack of business incentives for
the deployment and production of more secure software. His main recommendation/prediction is this: "Step one: enforce liabilities. This is essential. Today [...] the marketplace rewards low quality. More precisely, it rewards early releases at the expense of almost all quality. If we expect
CEOs to spend significant resources on security -- especially the security of their customers -- they must be liable for mishandling their customers' data. If we expect software vendors to reduce features, lengthen development cycles, and invest in secure software development processes, they must be liable for security vulnerabilities in their products." Schneier's five-step plan for thinking about security is also good.
Pelerin continues: "All well and good, but this raises some questions in the case of a company offering security solutions based on open source / free software.
- Where does the chain of liability end? Can somebody attempt to recover damages from Linus when a kernel security hole shows up?
- Can a case be made for lower insurance rates for free software solutions? (I mean, can it be made to the accountants and the lawyers, not the techies).
- When liability enters the picture, which mechanisms can allow free software to compete based on its merits, not on the likelihood of surviving a liability lawsuit?
And I poop out differentials.
hello
Frost Piss!
no, not really. Can't do it as AC. Damn.
Available Here
p ?j id=1042
http://www.vasoftware.com/about/aboutus_jobs.ph
IT SENIOR MICROSOFT SERVER ADMINISTRATOR
Position Summary:
A Senior NT/Windows 2000 server administrator who can design, implement and maintain a solid, reliable NT/Windows 2000 infrastructure in a mixed Linux/Windows server environment.
Responsibilities:
Primary responsibility for maintaining Microsoft server infrastructure.
Maintaining all applications running on Microsoft platforms.
Implementing new Microsoft based applications where necessary.
Maintaining Windows backups and offsite storage of tape media.
Managing Citrix server farm.
Troubleshoot and resolve Microsoft server and desktop problems quickly.
Work closely with desktop team to ensure reliable desktop systems.
Requirements:
The ideal candidate has:
At least three (5) years experience as a Microsoft server administrator.
MCSE certified.
Citrix experience (CCEA preferred).
Familiar with SQL databases.
Outstanding customer service skills.
Outstanding time management skills.
Outstanding communication skills, both written and oral.
Highly self-motivated, as well as capable of inspiring other members of your team to perform.
The ability to work in a multi-tasking environment.
BS/MS in Computer Science, Engineering or equivalent work experience.
-- HURRY AND GET THOSE RESUMES IN! -- RWS
I eat a sin and I poop a cos.
I eat a cos and I poop a negative sin.
I eat a log of sin, and I poop a cot.
I eat a log of cos, and I get a negative tan.
oppps... you have let the cat out of the bag now. We were planning to replace all of our linux boxes with windows boxes, but we wanted to start out gradualy because the likes of Rob would not be happy to find out that his code base was being reengineered by Microsoft Consulting Services as we speak. Kind Regards, VA Linux ^H^H^H^H^H Software^H^H^H^H^H^H Windows..
you fuckin' m0dZ are so fucking stupid (or extremely gay) to be modding up a goatse.cx link.
you stupid fucks. i hope you suffocate in your own shit you dumb nigger loving faggots.
TRoLL.
What's the estimated cause of Nimda so far? Code Red? SadminD? Melissa?I love you? all the other outlook worms?
Don't know of others, but the "love" thing supports a large herd of lawyers involved with paternity suits.
that second link is to http://www.goatse.cx
amusing, meTROLLica
seriously, that was clever