3 ms·
You present valuable arguments, but in this environment shipping is more important than creating an appsec team or bug bounty program as a solo developer. I'm s
by Beefin 6y ago
You present valuable arguments, but in this environment shipping is more important than creating an appsec team or bug bounty program as a solo developer. I'm sure you understand :)
- ciarannolan 6y ago>shipping is more important than creating an appsec team or bug bounty program Is it? Isn't "not losing people's personal health data to a breach" more important than shipping?
- Beefin 6y agoHey! all data is encrypted on the client side (https://github.com/esteininger/pymongo-fle-example https://github.com/esteininger/pymongo-fle-example) and wiped after 30 days. if there are any data breaches, it will all be useless
- ciarannolan 6y agoSorry, I didn't see that part.
- alixanderwang 6y agoHe's a security guy at a bank. For the people you're building for, that line is enough. Congrats on shipping!
- Beefin 6y agoYeah I always have to read in between the highly engineering/tech comments on HN. they're super useful but it's always challenging balancing these details /w shipping!
- arkadiyt 6y agoFor personally monitoring his parents' health it works great. For accepting healthcare data from the public it's unacceptable.