"The only way to force companies to provide safety and security features for customers and users is with government intervention.
They routinely legislate safety — pollution standards, automobile seat belts, lead-free gasoline, food service regulations.
We need to do the same with cybersecurity: the federal government should set minimum security standards for software and software development."
https://www.schneier.com/blog/archives/2021/03/national-security-risks-of-late-stage-capitalism.html
Agree?
@mastsec not entirely. not with just that excerpt, anyway. It seems to me more difficult to make appropriate carve-outs for hobbyists given that casual side-projects can easily land in production software. like, at what point would Git have become subject to regulation? Is it based on # of users? There are pieces of software with very few direct users that, nonetheless, are hugely important.
