Re: Charging customers on security

Steve Friedl <[email protected]> Sun, 26 Sep 2004 21:33:50 -0700
Newsgroups gmane.comp.security.programming
Message-ID <[email protected]>
On Sun, Sep 26, 2004 at 02:40:29PM -0800, wirepair wrote:
> Charging for security of your own applications? That seems pretty backwards 
> to me. Why should the client who buys your software with the expectation that
> it works and is secure have to pay for the fact that it isn't? So when my
> seat belts are broken, and my tires randomly explode, I have to pay the car
> manufacturer more money to get these features fixed?

If you're paying an engineering firm to design some new seat belts, they
may want to smash up a few cars with crash dummies to test them.

You might or might not want to pay for that.

Steve

--- 
Stephen J Friedl | Security Consultant |  UNIX Wizard  |   +1 714 544-6561
www.unixwiz.net  | Tustin, Calif. USA  | Microsoft MVP | [email protected]