4 ms·
> Assume hostile users (security-wise). Ah, a personal favorite of mine which often makes other people uncomfortable. 1. Users are like Marines, if it can be
by huffmsa 7y ago
> Assume hostile users (security-wise).
Ah, a personal favorite of mine which often makes other people uncomfortable.
1. Users are like Marines, if it can be broken, it will be broken. If it's use is not clearly marked, it will be used incorrectly. If it can be fucked (literally or figuratively), it will be fucked.
2. Users are malicious and are actively trying to backdoor everything you do. Why? Because it's the first thing I do with a new product / what I do with the competitions products.
3. It is the developers responsibility to mitigate the above cases.
- kingbirdy 7y ago> If it's use is not clearly marked, it will be used incorrectly. In my experience clear markings aren't enough to stop it being used incorrectly.
- huffmsa 7y agoAh yes. Should be revised to "unless it is clearly marked, it will rarely be used as intended. Even when clearly marked, users will misuse in ways you couldn't imagine"
- eswat 7y agoTrue. Clear markings are like a deterrent control in security. They can mitigate damage but something that prevents wrongful use needs to be used in the end.
- haecceity 7y agoWhy is that like marines?
- jki275 7y agoThere’s an old story about a Marine left alone in a room with two bowling balls for thirty minutes. At the end of the thirty minutes one bowling ball was in a bunch of little pieces scattered all over the room and the other one was pregnant.