3 ms·
I work in medical and there the top guys often make decisions that are really hard to implement in software. If they understood only a little of the consequenc
by spaetzleesser 6y ago
I work in medical and there the top guys often make decisions that are really hard to implement in software. If they understood only a little of the consequences of their decisions have they would probably think a little more about the rules they are creating.
I see the same in product development. Marketing comes up with something that has words like "most of the time", "sometime" or "somehow" in the description. Really hard to impossible to implement. When I ask them what they really want to achieve we usually end up with something simpler and straightforward that fulfills the needs, is well understood and easy to implement.
I think in government with most of the work being outsourcend this feedback loop doesn't exist. A committee comes up with something and the contractor implements it without questions asked. The more complex the work, the more money for the contractor.
- cratermoon 6y agoI work with authentication protocols and access control. Product people want magic.
- spaetzleesser 6y agoI am fine with product people expressing their wants. But we shouldn’t accept their requests blindly but put them through a reality check. The customer is not always right or at least the customer doesn’t explain his real problem properly.
- cratermoon 6y agoThat's true, but power dynamics don't always align with wishes. If the professional recommendations of security people weren't so routinely ignored, you'd see a lot less stupid breaches. A great many disasters^1 could be prevented if experts weren't ignored. [1] https://calteches.library.caltech.edu/3570/1/Feynman.pdf https://calteches.library.caltech.edu/3570/1/Feynman.pdf
- snth 6y agoBah. People have to ignore security professionals all the time, because all too often, security professionals don't care if any software gets shipped.
- spaetzleesser 6y agoThat's unfortunately true too. I often break IT policies because I have to do my job and when I ask they don't have an answer. Security people definitely can't just say "No" but have to help finding a solution.
- disgruntledphd2 6y agoEveryone wants magic, even technologists. Unfortunately, magic is hard work.