I wish governments would have some kind of enforceable ISO standard on it, where it would be required by law for source code to be properly validated, either by a compiler or linter or by a third party, where an insurance company would be financially liable if a CVS is found.
I feel like it is the only real way to improve cybersecurity in serious manner. There is so much software in the world that it has become a national security problem.
Of course one issue with this, is that as long as the NSA is obviously a leader in cybersecurity, they would rather have software used outside of the US to be less secure, but with time, that strategy might also cause problems.
I don't have a problem being spied on by western government, but if low security causes bad state actors or other criminal to cause problems, then that's bad.
Your points seem a little off topic as this isn't about proprietary payware with obvious security deficiencies. This is a subtle cryptographic issue in a high quality Free and Open Source software package.
I agree though that market pressures aren't always enough to motivate adequate investment in cybersecurity. A recent case involving D-Link: https://news.ycombinator.com/item?id=39960107
I wish governments would have some kind of enforceable ISO standard on it, where it would be required by law for source code to be properly validated, either by a compiler or linter or by a third party, where an insurance company would be financially liable if a CVS is found.
I feel like it is the only real way to improve cybersecurity in serious manner. There is so much software in the world that it has become a national security problem.
Of course one issue with this, is that as long as the NSA is obviously a leader in cybersecurity, they would rather have software used outside of the US to be less secure, but with time, that strategy might also cause problems.
I don't have a problem being spied on by western government, but if low security causes bad state actors or other criminal to cause problems, then that's bad.