Secure software more than just a pipedream

Remember that Conficker computer worm they warned us about. It was to devastate computers on April Fool’s Day?

A CNET report says that after the Conficker worm scare and Microsoft patching multiple additional software vulnerabilities last week, it might be reasonable to assume the bad guys are winning the battle to get control over Internet-connected computers.

That's not necessarily the case. Developers are increasingly equipped with tools to shore up their products and vendors are collaborating in unprecedented ways to not only close holes in software, but also make sure they aren't in there in the first place, according to security experts.

"Conficker did far less damage in 2009 than it would have done in 2003," said Dan Kaminsky, director of penetration testing at IOActive. "Windows used to be a lot easier to blow up."

More of the story here.