4 ms·
Being smart about security is all good and well, but it doesn't mean bad actors should be tolerated. It's like saying the real problem in a war-zone is not the
by gnode 8y ago
Being smart about security is all good and well, but it doesn't mean bad actors should be tolerated. It's like saying the real problem in a war-zone is not the aggressors, but the lack of bullet proof vests, helmets, and gas masks, and the civilians caught up in it should put their "man-pants" on.
- w_t_payne 8y agoI take your point, but the phrase 'being smart about security' trivializes a task of monumental proportions. We need to rethink how we design software / hardware systems. We need to rethink what we mean when we talk about software engineering professionalism. We need to rethink how we approach quality and liability issues. All of these things go so much further than just 'being smart about security': They go to the very core of our profession and how we organize ourselves. True, we need to contain bad actors, starting with the ones who are actually criminal and hostile, but that comes a distant second to the imperative need to get our own house in order. The security services are literally the least of our worries, and (almost) the last thing we need to worry about. We have much much much bigger problems.