The “secure software” dilemma



It’s quite a dilemma when a software product is billed as more secure than another…. several days back when Mozilla Firefox released v. 1.5.0.4 which fixed a number of security issues, I saw someone comment “I thought firefox was supposed to be secure.” I think there’s a misunderstanding when it comes to software. I think the misunderstanding is that one piece of software can be secure and another not. Out of the box. Let’s take a stab at clarifying…. Security is not a product, it’s not a feature, it’s a way of doing things. Along those lines….


Someone points out that linux is insecure. The point is very good, well taken and well done. The writer drives home the point by using cars as analogy. They say, linux is more secure than windows, (from the article) “If we were talking cars, Linux would be a Volvo S80 and Windows would be a Ford “Hit here to blow up” Pinto.”

The point though is that ANY car can be involved in a wreck, so a “secure” car doesn’t immunize you against a wreck. Driving practices CAN protect against a wreck though. The same is true with computers, secure PRACTICES can prevent security breaches. The same is true in the development of software such as firefox. Being responsive to security disclosures is one way that a software product can be considered “more secure” than another. From what I’ve seen, mozilla seems to be fairly responsive when they’re advised of security issues with firefox. I’ve seen anectdotal reports of a very sluggish response at Microsoft with similar issues. Some areas of the web seem to be filled with stories of “I reported xyz vulnerability to Microsoft xxxx months ago and they’re still investigating, so I’m disclosing publicly to “increase pressure” on them to react”.

Just because software is considered more secure, it’s not bullet proof, it will need updates and other safe working habits.

Related Posts

Blog Traffic Exchange Related Posts
  • Spyware news and musings It's funny, in the last couple days 180solutions had a blog post that was somewhat... what's the term I'm looking for ? well they were quite defensive and concerned about "anti-spyware zealots" about "Scanning companies" and trying to work with them to explain their business model. Of course, legal action......
  • Using screen to connect multiple users to a shell session I NEVER knew you could use screen for this.... Let multiple users connect to the same Console (command shell/bash shell) session simultaneously. I've looked at screen before. It's a great *nix utility that's available for most linux distributions. The primary use I've seen for it is to be able to......
  • Google Toolbar evil? Boy, that would bring in comments.... Googling Google highlighted some behaviour of the Google toolbar that seems a bit fishy. It appears that it blocks attempts to modify the default search provider in Internet Explorer. This was first reported over at Google blogoscoped and appears to be a bug (after......
Blog Traffic Exchange Related Websites
  • Linux Security, Then and Now A very interesting article by Keith Vanc at eSecurity Planet Linux is inherently not a secure operating system. The reason it's not secure is because Linux was based on the architectural design of UNIX, and the creators of UNIX didn't care about security – it was 1969 after all. "The first......
  • Secured or Unsecured Loan? Now THAT is the Question! This article was written by Andreas Nicolaides, a loans and money expert from MoneySupermarket.com. When talking about personal finance and in particular loans, we are often met with difficult decisions that can take us a long time to make. Taking out a loan is a big decision that shouldn’t be......
  • What Features to Look for in High Quality Security and Surveillance Systems If you find yourself at the point where you need to find a reliable and effective security and surveillance system for home or business, then be prepared to be overwhelmed. The diverse technologies, quantity of brands available on the market, furthermore the mystifying selection of aspects and choices is unbelievable.......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site