Thursday, October 28, 2004

Liability in Information Security

Bruce Schneier of Counterpane Internet Security Inc. has articulated that we should start thinking about liability in dealing with information security problems. He also pointed out that "There are no real consequences to the vendors for having bad security or low-quality software. Even worse, the marketplace often rewards low quality. More precisely, it rewards additional features and timely release dates, even if they come at the expense of quality. " You can read more on this issue in his recent article.