3 ms·
Yikes. I can't believe this and the responses all agree. There are two things at play here: The reality of what happens is that devs with limited experience a
by grumple 5y ago
Yikes. I can't believe this and the responses all agree.
There are two things at play here:
The reality of what happens is that devs with limited experience are asked to do things far outside their comfort zone because they aren't staffed enough. This isn't on the dev, it's on the company and a reality when it comes to growth. People make mistakes.
The second thing is that the databases themselves should be secure by default but are not. That's on the developers of that software. DBs should require setting strong passwords on creation.
Aws should also warn users about exposing these services directly to the outside world instead of just within the vpc.
- ghaff 5y ago>People make mistakes. It's as simple as that. And at scale, it adds up to a lot of mistakes. And for better or worse, much of the tech industry does not require extensive certification and training with checking and rechecking of every step. (And even aerospace makes mistakes.) And, yes, junior people make even more mistakes. But I'm not sure the fix to that is to have junior people's every action be check and rechecked by a more senior person. It can be done. That's generally how things work in medicine for example. Along with stringent certifications. But I'm not sure how many people in tech would want that. It's a reasonable discussion to have. Maybe training wheels are taken off too early in many cases.