Writing software is really hard: not only it is quite difficult to implement the functionalities that customers and final users desire and sometimes require, but it is also extremely difficult to write bug-free software, free from both functionality bugs and security bugs. (And it is not always easy to understand if there is a difference and what is the difference between functionality and security bugs.)
Unfortunately, except that for software developers (and not even for all of them), the fact that writing software is quite hard comes as a surprise or it is just plainly impossible to accept. How much harder could be building an engine than writing the software to pilot an airplane? (Consider moreover that of today most of the work of building an engine is done by software.)
Here I collected a random selection of recent news from The Register in different ways relevant to this subject:
- “Unauthorized code’ that decrypts VPNs found in Juniper’s ScreenOS“
- “Press Backspace 28 times to own unlucky Grub-by Linux boxes“
- “FireEye flamed: single email allows total network access“
- “Windows’ authentication ‘flaw’ exposed in detail“
- “It was Shodan easy! MacKeeper user database left wide open” and “It’s Still the Data, Stupid!“