35 ms·

TL;DR: The advice is: "use Open source software", "add logging", "set all pages to HTTPS" and follow a "top 10 list of the most critical security threats" Sad

TL;DR: The advice is: "use Open source software", "add logging", "set all pages to HTTPS" and follow a "top 10 list of the most critical security threats" Sad state of things. The concept of having your work done by "Full Stack Developer" will not be nice for opening up potential security holes, in my opinion. Additionally, I don't think there exists a real "Full Stack" dev, and I'm not alone in this opinion; click anywhere: https://medium.com/swlh/the-full-stack-developer-is-a-myth-4e3fb9c25867 https://medium.com/swlh/the-full-stack-developer-is-a-myth-4... https://news.ycombinator.com/item?id=10182936 https://news.ycombinator.com/item?id=10182936 http://andyshora.com/full-stack-developers.html http://andyshora.com/full-stack-developers.html https://frontendmasters.com/books/front-end-handbook/2017/practice/myth.html https://frontendmasters.com/books/front-end-handbook/2017/pr... https://vitamintalent.com/blog/the-myth-of-the-full-stack-developer https://vitamintalent.com/blog/the-myth-of-the-full-stack-de... https://techcrunch.com/2014/11/08/the-rise-and-fall-of-the-full-stack-developer/ https://techcrunch.com/2014/11/08/the-rise-and-fall-of-the-f... https://www.propelrr.com/blog/ux/full-stack-web-developer.html https://www.propelrr.com/blog/ux/full-stack-web-developer.ht...

anarchy8 9y ago
Not every company can afford to have a person dedicated to security. No full stack developer is a complete generalist -- everyone specializes naturally. The point is that they are comfortable doing a wide range of tasks. For some people that might make more sense.
- flavio81 9y ago
  > Not every company can afford to have a person dedicated to security But even in a team of 2 people you can have a good front-end developer and a good back-end developer.
danielharrison 9y ago
Proper full stack devs are rare, but they do exits, and they're worth their weight in gold to any company with under 50 staff. I've been 'full stack' my entire career but it takes a long time to actually become a competent full stack dev. A proper full stack dev can make design and implementation decisions at all levels, while being able to visualise the affect of those changes over the entire system, in detail, at low level. They're also able to communicate these changes not only to a uber-low-level introverted developer, they're also able to sit with the CEO/CTO and rationalise their decision in terms of cost and savings. And of course, they're able to drop anchor, exit the elevator at any level and get on the tools.

anarchy8 9y ago

Not every company can afford to have a person dedicated to security. No full stack developer is a complete generalist -- everyone specializes naturally. The point is that they are comfortable doing a wide range of tasks. For some people that might make more sense.

flavio81 9y ago
> Not every company can afford to have a person dedicated to security But even in a team of 2 people you can have a good front-end developer and a good back-end developer.

danielharrison 9y ago

Proper full stack devs are rare, but they do exits, and they're worth their weight in gold to any company with under 50 staff. I've been 'full stack' my entire career but it takes a long time to actually become a competent full stack dev. A proper full stack dev can make design and implementation decisions at all levels, while being able to visualise the affect of those changes over the entire system, in detail, at low level. They're also able to communicate these changes not only to a uber-low-level introverted developer, they're also able to sit with the CEO/CTO and rationalise their decision in terms of cost and savings. And of course, they're able to drop anchor, exit the elevator at any level and get on the tools.