Interesting, But Probably Too Difficult

Bruce Schneier has a post citing a software liability proposal. I can see two major problems, and these happen to be pointed out by commenters as well.  The first one is the definition of "normal" in the terminology.  If somebody gets all of a website's data because of a SQL injection attack, is that considered…

Advertisement