In my opinion,if a program is attacked by someone,the person who create the program should take charge of it.After all,he develop the program,he must realize the danger of it,so he have to take some measures to protect it.For example,he can make some safety program.Certainly,i do not mean the attacker is innocent but the developer can't avoid his responsibility.