Re: CVE-2017-14482 - Red Hat Customer Portal

[Óscar Fuentes]

dekkzz78@gmail.com writes:

>>Good luck finding many clients that can provide such a set of
>>requirements.  Most of the projects I deal with in my daytime job have
>>to do with clients that cannot even provide _in_formal requirements,
>>and depend on me and my team to do that for them.
>
> Ouch - there's a project doomed from the start.

Ever heard of interactive development? I've doing that for the last 20
years and the success ratio is almost 100%.

>>> The predominating choice is cheap software. As evidence for this claim I
>>> note the very high frequency of bug reports including security
>>> vulnerabilities.
>
> That's more to with poor teaching & understanding of how to code securely.

Yes, because there are practical methods that result in guaranteed
defect-free software.

Sigh.