Chapter 2. Six Billion Crash Test Dummies: Irrational Innovation and Perverse Incentives

 

This [software vulnerability] list acutely scratches at the top of an enormous iceberg. The underlying reality is shameful: most system and web application software is written oblivious to security principles, software engineering, operational implications, and indeed common sense.

 
 --Dr. Peter G. Neumann Principal Scientist, SRI International Computer Science Lab

You are a crash test dummy for software manufacturers and are paying extravagantly for the privilege. In 1986, an Alabama driver lost his seven-year-old grandson due to defective software that failed to correctly control the flow of fuel to the vehicle’s engine. This failure caused the vehicle to ...

Get Geekonomics: The Real Cost of Insecure Software now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.