3 ms·
This is written by a) a woman, and b) someone who works in information security.
by kiesia 4y ago
This is written by a) a woman, and b) someone who works in information security.
- MattPalmer1086 4y agoMy bad, I didn't check who wrote it. I assumed it was written from a developer perspective, as the arguments seem poorly made from an infosec perspective.
- MattPalmer1086 4y agoTo give some context here, I currently work on SDLC and dev security. Supply chain attacks are high on the agenda right now. I don't have a problem with this set of recommended practices. And that's all they are. These are things to consider and only constitute guidance, which may be out of date. It says all this in the intro.
- fedeb95 4y ago
- MattPalmer1086 4y agoHardly! I just didn't stop to check who the author was and made an unwarranted assumption. I'll make a mental note to do that from now on.
- Spooky23 4y agoWeird perspective from an infosec person. Controls are like brakes - they let the car go faster. There’s a lack of context as well… while intelligence agencies have a perspective fueled by lots of cash, many companies are working over their heads and adopting a “hold my beer” attitude with customer data.