Check for basic security features before buying software can and should be part of the enterprise purchasing cycle. Evaluating software binaries for basic compile-time security flags is as simple as running existing open-source scripts against the binaries in question. C/C++ compilers offer optional security “flags”–command-line arguments software build engineers pass to the compiler–that make hacking software much harder. To its credit, Zoom quickly added these security flags to its Linux binary in response to Mudge’s tweet.”]

