2 ms·
I think it's the opposite; they put the embedded developers, who (rightly) have no sense of the insane challenge of doing security, in charge of talking to the
by krallja 10y ago
I think it's the opposite; they put the embedded developers, who (rightly) have no sense of the insane challenge of doing security, in charge of talking to the Web.
- vonmoltke 10y agoI disagree with that characterization. Engineers working on connected devices, Web or not, should be cognizant of security issues. That many aren't I see as a problem. For that matter, I don't think most web developers have a proper sense of security challenges, either.
- dTal 10y agoDoes it have to be either/or? You need both types of developers, and they have to talk to each other, and you have finite hiring resources. These are very different cultures, and the failure mode is either broken system software, which will get noticed and fixed, or broken security, which likely won't.