See Full Story
A report issued Monday purports to detail the 25 most dangerous programming errors committed by software writers that result in security bugs and enable cyber espionage and cybercrime. The list was compiled by more than 30 experts from cyber security organizations in the U.S. and other countries. Experts from the Computer Emergency Response Team and the non-profit technology resource Mitre, among others, named the errors, according to Mason Brown, director of the SANS Institute, which helped coordinate the project.
>>contracts that require developers to fix the errors and take financial responsibility for the ones they miss
Yeah right, a 5 page shingle website will cost 50,000 instead of 5000 which is already too expensive. Never mind a site that has tiered access levels to content or eCommerce. I suggest using a shopping cart provider so it's all on them if it goes south.
Financial institutions can afford this, everyone else should have insurance for errors and omissions.