We’re not using Windows 95 anymore. Few Pentium I systems remain in production use, and the majority of the world no longer connects to the Internet through telephone lines and analog modems (though some poor souls still do).
If those days are over, then why do the horrible software design and security practices that stem from that era still roam the Internet — and in new code?
I suppose some forgiveness should be granted to very small companies that lack the resources to build or even conceptualize a highly secure system. However, there’s no excuse for companies in financial, health care, or other large industries to get it wrong. At the very least, they should avail themselves of the vast array of best practice guidelines and freely available, thoroughly vetted code — or hire someone who can. There’s no need to reinvent the wheel (poorly) and expose yourself and your customers to fraud.
To read this article in full or to leave a comment, please click here