3 ms·
Last week when I heard about the Kapersky password manager thing (single source of entropy was the current time [1]), I asked myself, why is everybody allowed t
by _trampeltier 5y ago
Last week when I heard about the Kapersky password manager thing (single source of entropy was the current time [1]), I asked myself, why is everybody allowed to write software.
If you do a job like electrician or plumber, you have to learn and do tests in pretty much the whole world before you are allowed to work. Since I'm electrician myself, I know how stupid it can be sometimes to follow all the rules. But then if something happens, you are happy everything was installed in the right way.
[1] https://donjon.ledger.com/kaspersky-password-manager/ https://donjon.ledger.com/kaspersky-password-manager/
- Forbo 5y agoI largely agree, although I would say it's less "stupid" and more "cumbersome". Nobody wants to take the time to do things right because of the effort costs, but this is going to ultimately be more beneficial in the long run. I think my favorite phrase from recent happenings that encapsulates this concept is "Ransomware actors are just technical debt collectors."