Under the subject "InternetNews Realtime IT News - Merchants Cope With PCI 
Compliance", Kenneth Van Wyk <[EMAIL PROTECTED]> wrote:
[...] In talking with my customers over the past several months, I always 
find it interesting that the vast majority would sooner have root canal 
than submit their source code to anyone for external review. [...]

There's a simple reason for that reluctance - most people are painfully 
aware that their software won't stand the scrutiny that an external review 
would entail.

-- 
Jonathan Leffler ([EMAIL PROTECTED])
STSM, Informix Database Engineering, IBM Information Management
4400 N First St, San Jose, CA 95134-1257
Tel: +1 408-956-2436         Tieline: 475-2436
"I don't suffer from insanity; I enjoy every minute of it!"

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
Secure Coding mailing list (SC-L) SC-L@securecoding.org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php
SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
as a free, non-commercial service to the software security community.
_______________________________________________

Reply via email to