3 ms·
Security Training for Engineers
- unethical_ban 6y agoSlide 11: Don't bypass security settings for hackday. Well then, don't have hackdays. Or have change processes so streamlined and automated that hackdays don't have to exist. The whole point of hackdays is to get quick POCs developed in record time, bypassing the normal rigors of planning, backlogging, storypointing, lab/dev/test/prod and just get something working. And in my experience, it's a service or feature that the security side of the CICD pipeline isn't prepped for. So yeah, you have to bypass things sometimes.