2 ms·
I agree it's insane but this is what the market optimizes for. I pushed for more security and better practices until I was fired from 3 companies. It's quite o
by pdimitar 6y ago
I agree it's insane but this is what the market optimizes for.
I pushed for more security and better practices until I was fired from 3 companies. It's quite obvious that business only cares about PR; if a big security incident happens they are more interested in how to reduce liability and not how to prevent the problem in the first place [the next time around].
Until programmers become an elite clique with a huge barrier to entry and our own independent income -- completely disconnected from the interests of those who want to use our services -- then we have our hands tied and are at the mercy of the paycheck and its innate conflicts of interest with good craftsmanship.
- lrvick 6y agoI know this struggle well. Survivors bias is an epidemic. It is one of the reasons I started my own security consulting firm. I feel I am happier and have a wider net impact now that I can choose to invest less time with clients that can't afford to be super interested in security right now and invest more time in those that are. Weirdly companies seem to listen to security consultants more than their own internal full time security advocates.