<![CDATA[Geekonomics: The Real Cost of Insecure Software]]>

false <![CDATA[Geekonomics: The Real Cost of Insecure Software]]> 2265508 1 “The clarity of David’s argument and the strength of his conviction are truly inspiring. If you don’t believe the world of software affects the world in which you live, you owe it to yourself to read this book.” –Lenny Zeltzer, SANS Institute faculty member and the New York Security Consulting Manager at Savvis, Inc. “Geekonomics stays with you long after you finish reading the book. You will reconsider every assumption you have had about software costs and benefits.” –Slava Frid, Gemini Systems, CTO, Resilience Technology Solutions “Information Security is an issue that concerns governments, companies and, increasingly, citizens. Are the computer systems and software to which we entrust our sensitive and critical information, technologies that are out of control? David Rice has written an important and welcome book that goes to the heart of this issue, and points to solutions that society as a whole needs to debate and embrace.” –Nick Bleech, IT Security Director, Rolls-Royce “If you are dependent upon software (and of course, all of us in the modern world are) this book is a fabulous discussion of how and why we should worry.” –Becky Bace The Real Cost of Insecure Software • In 1996, software defects in a Boeing 757 caused a crash that killed 70 people… • In 2003, a software vulnerability helped cause the largest U.S. power outage in decades… • In 2004, known software weaknesses let a hacker invade T-Mobile, capturing everything from passwords to Paris Hilton’s photos… • In 2005, 23,900 Toyota Priuses were recalled for software errors that could cause the cars to shut down at highway speeds… • In 2006 dubbed “The Year of Cybercrime,” 7,000 software vulnerabilities were discovered that hackers could use to access private information… • In 2007, operatives in two nations brazenly exploited software vulnerabilities to cripple the infrastructure and steal trade secrets from other sovereign nations… Software has become crucial to the very survival of civilization. But badly written, insecure software is hurting people–and costing businesses and individuals billions of dollars every year. This must change. In Geekonomics, David Rice shows how we can change it. Rice reveals why the software industry is rewarded for carelessness, and how we can revamp the industry’s incentives to get the reliability and security we desperately need and deserve. You’ll discover why the software industry still has shockingly little accountability–and what we must do to fix that. Brilliantly written, utterly compelling, and thoroughly realistic, Geekonomics is a long-overdue call to arms. Whether you’re software user, decision maker, employee, or business owner this book will change your life…or even save it. The Alarming Cost of Insecure, Badly Written Software... and How to Finally Fix the Problem, Once and for All! Six billion crash test dummies: why you’re at greater risk than you ever imagined. You pay the price: why consumers are legally and financially responsible for the mistakes of software manufacturers. Broken windows: how software promotes epidemic cyber crime and threatens national security. Who runs the show?: Why software manufacturers fought against the U.S. Food and Drug Administration’s attempts to protect the U.S. blood supply. Protecting national infrastructure: real incentives for transforming software manufacturing. Surviving the information superhighway: practical, must-read advice in a world of insecure code. Preface xiii Acknowledgments xix About the Author xx Chapter 1: The Foundation of Civilization 1 Chapter 2: Six Billion Crash Test Dummies: Irrational Innovation and Perverse Incentives 19 Chapter 3: The Power of Weaknesses: Broken Windows and National Security 73 Chapter 4: Myopic Oversight: Blinded by Speed, Baffled by Churn 131 Chapter 5: Absolute Immunity: You Couldn’t Sue Us Even If You Wanted To 179 Chapter 6: Open Source Software: Free, But at What Cost? 243 Chapter 7: Moving Forward: Rational Incentives for a Different Future 273 Epilogue 321 Notes 325 Index 341 2271524 9 12 2007 Geekonomics: The Real Cost of Insecure Software total:10|5:3|4:1|3:5|2:1|1:0| 10 36 22 0 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 0 0 false Mon Nov 23 01:43:14 -0800 2009 Mon Nov 23 01:42:22 -0800 2009 Mon Nov 23 01:43:14 -0800 2009 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 5 0 false Wed Oct 28 22:20:33 -0700 2009 Wed Oct 28 22:20:33 -0700 2009 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 0 0 false Sat Oct 03 07:32:05 -0700 2009 Sat Oct 03 07:32:05 -0700 2009 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 4 0 false Mon Jul 27 00:00:00 -0700 2009 Mon Jul 13 14:08:43 -0700 2009 Mon Jul 27 16:11:22 -0700 2009 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 0 0 false Sun Jun 14 06:09:58 -0700 2009 Sun Jun 14 06:09:58 -0700 2009 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 0 0 false Tue May 19 17:38:24 -0700 2009 Tue May 19 17:40:39 -0700 2009 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 0 0 false Thu May 07 08:47:14 -0700 2009 Thu May 07 08:47:14 -0700 2009 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 0 0 false Sat May 02 07:09:42 -0700 2009 Sat May 02 07:09:42 -0700 2009 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 0 0 false Fri Apr 17 17:57:42 -0700 2009 Fri Apr 17 17:58:10 -0700 2009 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 0 0 false Wed Feb 25 10:39:24 -0800 2009 Wed Feb 25 10:39:24 -0800 2009 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 5 0 false Thu Jan 01 17:46:41 -0800 2009 Thu Jan 01 17:46:41 -0800 2009 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 0 0 false Wed Dec 03 13:34:50 -0800 2008 Fri Nov 27 02:05:56 -0800 2009 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 0 0 false Thu Nov 20 07:56:50 -0800 2008 Thu Nov 20 07:56:57 -0800 2008 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 3 0 false Tue Nov 04 16:04:01 -0800 2008 Tue Nov 04 16:04:01 -0800 2008 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 2 0 false Sat Oct 18 10:25:19 -0700 2008 Sat Apr 04 14:05:21 -0700 2009 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 0 0 false Sat Oct 04 02:47:20 -0700 2008 Sat Oct 04 02:47:20 -0700 2008 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 3 0 false Mon Jun 30 15:51:41 -0700 2008 Mon Jun 30 15:51:41 -0700 2008 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 3 0 false Wed Jun 25 16:58:25 -0700 2008 Wed Jun 25 16:58:25 -0700 2008 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 0 0 false Sun Apr 13 12:03:14 -0700 2008 Sun Apr 13 12:03:24 -0700 2008 2265508 0321477898 9780321477897 10 0 Geekonomics: The Real Cost of Insecure Software 3.60 http://www.goodreads.com/book/show/2265508.Geekonomics_The_Real_Cost_of_Insecure_Software 3 0 false Wed Apr 23 04:57:48 -0700 2008 Mon Jan 28 04:24:05 -0800 2008 Mon Jan 28 04:24:13 -0800 2008 http://www.goodreads.com/book_link/follow/8?book_id=2265508