The bar for "working" is limited to perfect-path tests then? As someone pointed out the other day, we do seem to be getting better about security -- less issue

The bar for "working" is limited to perfect-path tests then? As someone pointed out the other day, we do seem to be getting better about security -- less issues overall than there used to be. Likely a sign people are taking this seriously and frameworks have gotten better. * Full Disclosure Mailing List || https://seclists.org/fulldisclosure/ https://seclists.org/fulldisclosure/ Ultimately, a big issue with security is that nobody thinks of it as their job. "Oh cool, I made code my non-technical boss said was good enough! Time to clock out!" And that's really flawed. Security is everyone's job. Everyone. The best system is still susceptible to bad passwords. (= What's security training look like in your org? Most likely there isn't any. So... pitch it. Here's a good template to get started: * For Everyone - PagerDuty Security Training || https://sudo.pagerduty.com/for_everyone/ https://sudo.pagerduty.com/for_everyone/