Web Development

This points to the worst security holes I've ever seen - unlocked developer machines.

More often than not, I've seen that dev groups have the absolute worst security practices - even if their policies are rock-solid.

Just a few weeks ago, I mentioned in a public developer discussion about spyware and spyware removal tools that, if I wanted to distribute it, I'd create a spyware-killer with spyware in it - and post a link on open spyware discussions.

Gates was right when he said that "Trustworthy Computing" should be a priority for developers.

If I get just ONE more contract, where I warn the business about security holes and they dismiss it as an "acceptible risk" - I swear I'll beat them senseless with a pipe.

I know (a little) how the security manager of WTC felt. He had been warning the federal government and NYC for *years*, quite loudly, that 9/11 was inevitable.

I hope I'm not in the building when our IT card house comes down. We already know, from the arrests in Pakistan this month (Aug 04) that al Quaeda is very cyber-aware.