Kids Pass Just Reminded Us How Hard Responsible Disclosure Is
I have trouble understanding this mindset.  It's like, if you were walking away from your car in a parking lot, and someone said "Hey! You've left your car unlocked!", and you yelled at them angrily "Stop looking at my car!!!".   It makes no sense at all, and yet it's practically the universal response from people who don't know what they're doing.<p>People occasionally suggest that software engineers should be professionally licensed.  I have a different proposal: I think that people who want to <i>manage</i> a business involving software development should have to get trained and licensed.<p>ETA: while my proposal is somewhat facetious when considered about all software development, perhaps it's not completely inconceivable that we could require businesses collecting any personal information from users to be licensed and audited.  We already have PCI-DSS compliance rules for businesses using credit cards; this would be analogous, though it would have to be enforced by the government, as credit cards wouldn't necessarily be involved.