In my opinion,if a program is attacked by someone,the person who create the program should take charge of it.He create the program,so he must know its possible danger, so he ought to spare no effort to protect it.For instance, he can make some security program.Actually, I do not mean the attacker is innocent but the man who create the program is to be blamed.