who watches the watchers

the software supposed to keep computers and systems secure tend to be flawed themselves. an examination of security software reveals more flaws at an increasing rate.

"Security researchers...are increasingly less interested in poking holes in desktop operating systems.... A more fascinating and profitable area exists in finding vulnerabilities in the products meant to defend against the attacks themselves. It is time for the security vendors to stand up and make their own products more secure before they become preferred conduits for professionally designed malware."

the recommendation to rectify the problem raises issues.

Yankee Group urges vendors to further protect customers by comprehensive testing before product release, and by reviewing the entire code base for potentially dangerous functions. [italics added]

it's amazing the lax rules the software industry grants itself. can anyone imagine the auto or pharmaceutical industries getting away with this behavior?

¶ - nitish @ 4:41 PM