Sign up to save your podcasts
Or
Share The End of "User Error": Why Bad Code is the Real Cyber Threat 🧠Tech Takedown
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
The End of "User Error": Why Bad Code is the Real Cyber Threat 🧠Tech Takedown
We have been fighting the wrong war. 🛡️ For decades, we blamed "user error" for hacks—bad passwords, clicking links. We investigate the radical new US National Cybersecurity Strategy that declares: America's cybersecurity problem is actually a software quality problem.
1. The Liability Shift: We break down the Biden Administration's historic pivot to "Secure by Design." Instead of telling users to "patch harder," the government is moving to hold software vendors legally liable for shipping insecure code. We explain why this is the "Seatbelt Moment" for the tech industry—forcing companies to treat security as a product safety standard, not an upsell.
2. The 70% Vulnerability: Why are our systems so fragile? We expose the "Memory Safety" crisis. CISA reports that 70% of all major vulnerabilities (like Heartbleed or BLASTPASS) stem from using outdated, memory-unsafe languages like C and C++. The fix isn't better firewalls; it's rewriting the internet's plumbing in memory-safe languages like Rust—a massive undertaking that Big Tech is finally being forced to start.
3. The CrowdStrike Wake-Up Call: It wasn't a hacker that took down global airlines and banks in 2024; it was a bad software update. We use the CrowdStrike outage as the ultimate case study for why "software quality" is a national security issue. When security software has deeper access to your kernel than you do, a single quality control failure becomes a global catastrophe.
View all episodes
By MorgrainWe have been fighting the wrong war. 🛡️ For decades, we blamed "user error" for hacks—bad passwords, clicking links. We investigate the radical new US National Cybersecurity Strategy that declares: America's cybersecurity problem is actually a software quality problem.
1. The Liability Shift: We break down the Biden Administration's historic pivot to "Secure by Design." Instead of telling users to "patch harder," the government is moving to hold software vendors legally liable for shipping insecure code. We explain why this is the "Seatbelt Moment" for the tech industry—forcing companies to treat security as a product safety standard, not an upsell.
2. The 70% Vulnerability: Why are our systems so fragile? We expose the "Memory Safety" crisis. CISA reports that 70% of all major vulnerabilities (like Heartbleed or BLASTPASS) stem from using outdated, memory-unsafe languages like C and C++. The fix isn't better firewalls; it's rewriting the internet's plumbing in memory-safe languages like Rust—a massive undertaking that Big Tech is finally being forced to start.
3. The CrowdStrike Wake-Up Call: It wasn't a hacker that took down global airlines and banks in 2024; it was a bad software update. We use the CrowdStrike outage as the ultimate case study for why "software quality" is a national security issue. When security software has deeper access to your kernel than you do, a single quality control failure becomes a global catastrophe.