Schneier on Security

Excerpt

1 – Would a more proactive approach to security—working to ensure that stronger software security is built into applications—work any better than the reactive approaches, such as patches and external software safeguards?

Of course. It’s the only possible approach. The notion that we can write lousy software, throw it out into the world and then patch it later has failed. It doesn’t work. We need to write more secure software from the beginning.

2 – How satisfied do you think corporate CIOs and CSOs are with the effort their software vendors are putting into delivering more secure products? Do you see the quality of the security built into software products getting better or worse?…