3 ms·
Security centric development. I don't think I need to go into the details of why it's useful, but I think nearly every developer should have an idea of very co
by tuxxy 9y ago
Security centric development.
I don't think I need to go into the details of why it's useful, but I think nearly every developer should have an idea of very common vulnerabilities and bugs and be able to catch them _before_ code gets committed.
This means introducing security into your design discussions, stand-ups, and your code reviews. Developing the "adversarial mindset" isn't horrible necessary for just any developer, but it does help you see more issues that you may otherwise miss out on.
- crdoconnor 9y agoI've noticed that a lot of companies don't pay attention to developers who raise security issues - they usually just hire an expensive consultant and pay them to tell them what to fix.
- horofox 9y agoExactly, you might want to be the consultant
- crdoconnor 9y agoI might, but there's two parts to that: #1 having a security mindset and security knowledge and #2 successfully branding yourself as a trustworthy security consultant. I'm honestly not all that sure how you become the guy who an executive who knows nothing about security feels comfortable hiring. I'm also fairly sure that being good at #2 is somewhat orthogonal to being good at #1.
- thiago_fm 8y agogo to conferences, develop your charisma, get older, know people