Sigh. Everybody in software believes they have some variable understanding of security but in most cases that confidence isn’t validated by anything. In most ca

Sigh. Everybody in software believes they have some variable understanding of security but in most cases that confidence isn’t validated by anything. In most cases developers talking about security is Dunning-Kruger on full display. Essentially every software security related subject can be qualified by a single question: What industry trusted process validates your concern?