3 ms·

Another example... The current nightmare that is cyber security is caused by developers who do not understand that with great power comes great responsibility.

Another example... The current nightmare that is cyber security is caused by developers who do not understand that with great power comes great responsibility. The culture of software “engineering” and development is fundamentally broken and based entirely on “its not my problem if someone else gets hurt, I just build things.” There’s literally not a single other industry where this level of greed and willful neglect is acceptable. Of course, this would be reflected in the AI community as well.

Nasrudith 6y ago
That shows a fundamental lack of understanding of the fields of software engineering, cyber security and the fields. Both terms are individually overloaded such that many issues aren't even within their domain let alone actually handled by developers! No matter how good the lock is it does no good when the key is left on /top of tbe doormat/ by the user. Blaming greed of engineers for security problems? Seriously?! That is like railing against EMTs as being responsible for the Coronavirus because they wanted to get rich without working hard. It conflates so many different areas and roles that it isn't even coherent logic and is nonsensical.
- jollofricepeas 6y ago
  This is exactly the attitude to which I’m referring. If you don’t understand that engineering is the fundamental bedrock of IT and the lack of security application during the engineering SDLC is a consistent failure then I don’t know what to tell you except maybe to gain more experience in software engineering and read more about data breaches. Cyber security: https://en.m.wikipedia.org/wiki/Computer_security https://en.m.wikipedia.org/wiki/Computer_security But for arguments sake let’s just stick to network, application, mobile and IOT security. - Why is MFA not on by default? - How many devs have prod credentials published to Github.com right now? - How many unsecured IOT devices are there? - Why is email security such a dumpster fire? - How many companies have an SSDLC? - How many companies require separation of duties and approvals before a dev publishes another AWS bucket or some other unprotected data store to the web? Go ahead and blame business but they don’t know jack about software engineering. We determine which corners to cut as opposed to stating to business that security is just a part of doing engineering. We’re the one’s who decide and thus it’s our responsibility despite denials of people like yourself.

Nasrudith 6y ago

That shows a fundamental lack of understanding of the fields of software engineering, cyber security and the fields. Both terms are individually overloaded such that many issues aren't even within their domain let alone actually handled by developers! No matter how good the lock is it does no good when the key is left on /top of tbe doormat/ by the user. Blaming greed of engineers for security problems? Seriously?! That is like railing against EMTs as being responsible for the Coronavirus because they wanted to get rich without working hard. It conflates so many different areas and roles that it isn't even coherent logic and is nonsensical.

jollofricepeas 6y ago
This is exactly the attitude to which I’m referring. If you don’t understand that engineering is the fundamental bedrock of IT and the lack of security application during the engineering SDLC is a consistent failure then I don’t know what to tell you except maybe to gain more experience in software engineering and read more about data breaches. Cyber security: https://en.m.wikipedia.org/wiki/Computer_security https://en.m.wikipedia.org/wiki/Computer_security But for arguments sake let’s just stick to network, application, mobile and IOT security. - Why is MFA not on by default? - How many devs have prod credentials published to Github.com right now? - How many unsecured IOT devices are there? - Why is email security such a dumpster fire? - How many companies have an SSDLC? - How many companies require separation of duties and approvals before a dev publishes another AWS bucket or some other unprotected data store to the web? Go ahead and blame business but they don’t know jack about software engineering. We determine which corners to cut as opposed to stating to business that security is just a part of doing engineering. We’re the one’s who decide and thus it’s our responsibility despite denials of people like yourself.