4 ms·
I am fine with product people expressing their wants. But we shouldn’t accept their requests blindly but put them through a reality check. The customer is not a
by spaetzleesser 6y ago
I am fine with product people expressing their wants. But we shouldn’t accept their requests blindly but put them through a reality check. The customer is not always right or at least the customer doesn’t explain his real problem properly.
- cratermoon 6y agoThat's true, but power dynamics don't always align with wishes. If the professional recommendations of security people weren't so routinely ignored, you'd see a lot less stupid breaches. A great many disasters^1 could be prevented if experts weren't ignored. [1] https://calteches.library.caltech.edu/3570/1/Feynman.pdf https://calteches.library.caltech.edu/3570/1/Feynman.pdf
- snth 6y agoBah. People have to ignore security professionals all the time, because all too often, security professionals don't care if any software gets shipped.
- spaetzleesser 6y agoThat's unfortunately true too. I often break IT policies because I have to do my job and when I ask they don't have an answer. Security people definitely can't just say "No" but have to help finding a solution.