3 ms·

We also have no clue of how to program within specs at scale. Basically every month we have a huge breach at a major company. CS is at the stage of building en

• junon 6y ago
  That's less of a problem with building to spec (security is not a "spec") but instead with employees who are not familiar with keeping data safe, companies that give too much access to regular developers (e.g. Uber, I can attest), or engineers who are underqualified but charming or otherwise smooth talkers that worm their way into security-related positions when they have little to no experience or knowledge in that area.
• deleted 6y ago
  [deleted]
• majewsky 6y ago
  > We also have no clue of how to program within specs at scale. We do, but no one wants to pay for it, outside of very few select industries with very high reliability requirements (space travel, medical devices, etc.).
• ThrowawayR2 6y ago
  > "We also have no clue of how to program within specs at scale. Basically every month we have a huge breach at a major company." So many of these breaches are caused by absolutely boneheaded mistakes, some of which are known bad practices dating back to the '90s like allowing SQL injection, that I'd say that, no, we darned well do know how to do this. We are simply failing to hold developers (and their employers) accountable for knowing how.