Yep. And that is when innovative solutions are needed
(not from the buyer, but the seller).
However, regardless, any development from any source
has to be backed up with a code vetting system
designed to look for security bugs accidentally introduced
by careless programming, the sort of thing that is easy
to do when 'improvising'.
len
From: Rich Salz [mailto:]
It's when you need/want to retrofit security into a no-security "rich
user experience" system that you, your users, and at times the entire
Internet, are hosed.
