4 ms·

Cool, I agree with the author in concept, but there are so many goddamn engineers that ship incorrect/buggy/insecure software that if it wasn't its own function

by genmud 3y ago

Cool, I agree with the author in concept, but there are so many goddamn engineers that ship incorrect/buggy/insecure software that if it wasn't its own function, nobody would even pretend to care. In my experience, most Project/Product/Program Managers sure as shit aren't going to prioritize it. Not every org is FAANG. Unfortunately in many (most) organizations, in house developers get caught quite frequently eating the metaphorical security crayons.

cbsmith 3y ago
As per the point of the author though... tell me that platform/infra/devops/SRE is any different in this regard? The stuff I have to do to keep people from eating infrastructure crayons...
- genmud 3y ago
  They are similar, but different. Like ops is similar to eng, but different. For one, they can quantify downtime easier. Also, in most orgs, cybersecurity is responsible/accountable for the problems, but only can indirectly influence things.
  - cbsmith 3y ago
    > For one, they can quantify downtime easier. I don't understand this. The metric for downtime doesn't matter who is measuring it. > Also, in most orgs, cybersecurity is responsible/accountable for the problems, but only can indirectly influence things. Right, so very much like platform/infra/devops/SRE. ;-)