Government web FAIL

-
This caught my eye: Forbes claims our Government writes crappy code. Specifically web code.

Of course this was based on an analysis the security company Versacode did, so I'm not convinced how unbiased their judgement is. Still, it isn't all that hard to believe, since in my professional experience, there is an awful lot of insecure web code, out there. Most of this comes from sites with some sort of database backend (dynamic sites) rather than static sites. 

In my experience, this is because when projects get behind schedule (have you ever known a project *not* to get behind schedule?), testing and security concerns are the first two things to be tossed out the window. 

Okay - this little post ought to please all my Libertarian friends. But let me point out (since I have no ax to grind, unlike Versacode) that this sort of thing is *not* the exclusive failing of government. 

Boo-yah.


Comments

Hot Sam said…
There is a government agency that shall remain nameless, but I have it on good authority that their internal data is constantly being invaded by hackers, especially from China.

According to the insider, senior management in IT simply doesn't understand security well enough to stop it. So, when they find an infected computer, they wipe its memory clean and move to the next one. There is a forest fire around them, and they are stomping on burning leaves.

Let's just say that this particular agency has a lot of information about US businesses that could be used for insider trading or for other insidious purposes.

Now, no one can confirm that the Chinese GOVERNMENT is involved. It may be freelancers. But I'm not sure that that matters.
8:01 PM
Dr Ralph said…
It's been my experience that even if a vulnerability is known about, some key decision maker will decide *not* to fix the problem because it will disrupt/inconvenience/cost-too-much, and they'd rather take their chances with the vulnerability. This isn't a government issue - it's a management issue.

As the saying goes, there's no patch for stupidity.
5:40 PM
Post a Comment

Popular posts from this blog

Contact Fedex Delivery Dept For Your Package....

-
Dear Customer! We have been waiting for you to contact us for your Confirmed Package that is registered with us for shipping to your residential location. We had thought that your sender gave you our contact details. It may interest you to know that a letter is also added to your package. However, we cannot quote its content to you via email for privacy reasons. We understand that the content of your package itself is a Bank Draft worth of $800,000.00 USD, FedEx do not ship money in CASH or in CHEQUES but Bank Drafts are shippable. The package is registered with us for mailing by your colleague, and your colleague explained that he is from the Country but he is here in Nigeria for a three (3)months Surveying Project as he works with a consultant firm in Nigeria West Africa We are sending you this email because your package is been registered on a Special Order. What you have to do now, is to contact our Delivery Department for immediate dispatch of your package to your re...
Read more

Random Thoughts on AI-generated images

-
Image
It's been a while, but I'm back (bitching as usual). Let's start with....Artificial Intelligence generated art! 1. The first thing to remember is this is the new Bright Shiny Object. LIke the camera once was. Upon seeing the first daguerreotype around 1840, the French painter Paul Delaroche (1797-1856), declared: “From today, painting is dead.” He was a little premature. And there will continue to be be more Bright Shiny Objects that will grab everyone’s attention and cause gnashing of teeth and rending of garments. 2. It’s also version .01 of this Bright Shiny Object. What we’re currently seeing is essentially demo reels: “See what I can do!!” Interesting but not *that* interesting. Once the excitement wears off it will be just another tool, used badly by some, used well by others. The camera did not replace painting, but it opened the eyes of artists to the possibilities of other forms. 3. Where Does the Artificial End and the Artist Begin? in my mind this situation is th...
Read more

Cloud on the Cheap

-
These days, The Cloud is all the rage in the computer world. Cloud storage is probably as far as most folks want (or need) to go - think Box.com, Dropbox, OneDrive, Google Drive/Docs...the list goes on. You can collect quite a bit of free off-site storage if you're of a mind to.  These are all examples of  SaaS - Software as a Service . PaaS - Platform as a Service - gives you a specific pre-configured platform to build applications or services. Finally there is Infrastructure as a Service (IaaS), which is virtualized hardware: CPUs, hard drives, networking, firewalls and the like. A little background:  at my day job at Sisyphean Corp, I manage hosting for a couple dozen big websites (I lose count sometimes).When I first took this on, we were on physical hardware. Trouble with this is once you make your decisions about the hardware, you're sort of stuck with it for a while. If you've predicted your needs poorly, or they change, well... I migrated one o...
Read more