Insecure at any bit rate: why Ralph Nader is the true OG of the software design industry

No Thumbnail Available

Authors

Maxwell, Paul
Barnsby, Robert E.

Issue Date

2019-10-04

Type

journal-article

Language

en_US

Keywords

Research Projects

Organizational Units

Journal Issue

Alternative Title

Abstract

The software design industry lacks standards for both code quality and security; as a result, code vulnerability at the time of a product’s release is often compromised at subsequent, critical junctures in its consumer-use phase. Exacerbating this problem is the fact that developers typically waive all liability for code errors and place the burden of security on unqualified, non-expert users. Although certain legal remedies exist in the US – often in the form of US Federal Trade Commission (FTC) enforcement actions classifying inadequate data security as an ‘unfair trade practice’ – they are limited in nature, infrequently utilised and are generally incapable of meaningfully protecting consumers. History has shown that other major technological advances, including developments in the aircraft and automotive industries, have occurred in similar unregulated manners, often resulting in negative and potentially dangerous outcomes for the public. To ensure the security of today’s software environment, change from within the industry – not unlike the Ralph Nader-inspired industry-wide automotive safety improvements in the 1970s – is necessary to create a shared liability model for software which protects users from poor development practices. Such a model, when coupled with certification standards and education, will result in a more secure software design industry.

Description

Citation

Paul Maxwell & Robert Barnsby (2019) Insecure at any bit rate: why Ralph Nader is the true OG of the software design industry, Journal of Cyber Policy, 4:3, 346-361, DOI: 10.1080/23738871.2019.1671471

Publisher

License

Journal

Volume

Issue

PubMed ID

ISSN

2373-8871
2373-8898

EISSN