4 ms·
While I agree with you on broad strokes, I'm sure, somewhere, someday, somebodies concerns over the security implications of a logging framework (e.g. Log4J) we
by stragies 5y ago
While I agree with you on broad strokes, I'm sure, somewhere, someday, somebodies concerns over the security implications of a logging framework (e.g. Log4J) were brushed under the table by a statement like that.
- prepend 5y agoI think security is extremely important (as is BLM), my issue in this example is that the person brought up security as questions where it was not relevant. I think that actually hurts security as it made people tune out because it wasn’t relevant. So it was like the boy who cried wolf in that when security was important it wasn’t paid attention to. I’m not saying that security reviews shouldn’t be performed. They should. Security should be part of design and code review. But it’s not a relevant question in every single situation.