More Than A List

摘要

A lot of programmers are perfectly aware that their code could potentially contain security holes. Handing them this list isn't going to help much. However, the problem is not, as Frank Hayes seems to see, that they can't be bothered. The problem is that they aren't given enough time or resources to check for security problems. The failure of software to live up to security standards is usually caused at the manager level. Companies are not going to improve their software quality if it costs them too much.