Advertisement

Should developers be sued if they introduce security holes in software?

Started by August 24, 2012 04:01 PM
20 comments, last by _mark_ 12 years, 2 months ago
The only way I could see a developer getting sued is if they introduced a bug in the software by either deliberately introducing one or creating one through negiligence i.e. cutting corners. Even then I think you'd have a hard time suing unless it was large commercial software such as for a bank or for meidcal related software where a bug could result in someones death.

Could/should the company be sued? Possibly but you'd need to prove the company either knew about the problem and turned a blind eye or didn't carryout propper QA of the software before it was shipped.

What was the secret, they wanted to know; in a thousand different ways they wanted to know The Secret. And not one of them was prepared, truly prepared, to believe that it had not so much to do with chemicals and zippy mental tricks as with that most unprofound and sometimes heartrending process of removing, molecule by molecule, the very tough rubber that comprised the bottom of his training shoes.

A few years ago, one of my university professors made a similar point: Doctors, lawyers, architects, civil engineers, etc. all have to go through a process which validates them as being a professional in the field. The last thing you want is an unqualified professional working in a field in which their negligence can cause catastrophes.
"Shouldn't the same standard apply to software developers?" he asks.
My gut response is a righteous "No!" and then I'm sent off trying to find ways to validate my answer.
The other answer is that software already do have such processes. Many (most?) professional software developers have gone to university and earned a degree, just like other professionals. Similarly, there are professional industry qualifications you can study.

It's just that there isn't a standard, and there isn't always a requirement for any of these. Which makes sense, given the immense variation of kinds of software. And it's not like software development sticks out as a sore thumb - most jobs, including professional ones, are like this - you need qualifications, but there isn't necessarily a standard one to get.

http://erebusrpg.sourceforge.net/ - Erebus, Open Source RPG for Windows/Linux/Android
http://conquests.sourceforge.net/ - Conquests, Open Source Civ-like Game for Windows/Linux

This topic is closed to new replies.

Advertisement