As an expert on computer security myself (I'm kidding), I think that the problem is mostly due to inflationary software development, rather than due to intrinsically complex security requirements. There certainly are breaches on supposedly established and rock-solid systems, too (and when they occur, they have yet a larger impact, like "heartbleed"), but that on-average tendency of it "only getting worse" as Quexos put it, I attribute to how people are getting into the software business without any qualification for what they're doing, whatsoever.
Only lately, companies have realized what potential is in the web (as if it hadn't been around for long enough), now they're churning out software by "the more [features], the merrier" but with an apparent lack of quality.
|