5 ms·

I also believe that there is a culture of not actually firing people who do stupid things like this. A mistake is one thing, but negligence is another. Beyond

I also believe that there is a culture of not actually firing people who do stupid things like this. A mistake is one thing, but negligence is another. Beyond that, whoever allows customer data to be freely accessed and used in cases like this should also be fired. Start culling those who are doing the job poorly to start making space for others who may be able to do it properly.

AlexandrB 3y ago
This flows from the top down. The consequences to companies that leak private data are so minor why would someone lose their job for risking a leak? At worst it's a fine that amounts to a slap on the wrist. Things that limit civil liability like mandatory arbitration clauses have made this worse.
rqtwteye 3y ago
"Start culling those who are doing the job poorly to start making space for others who may be able to do it properly" How about starting to cull top level managers who constantly put pressure on people, don't hire competent security people but reward quick results that create future problems?
- buttcomputing 3y ago
  [flagged]
- theamk 3y ago
  I dunno, if a commercial driver violates speed limits and hits someone, do we want to accept excuses that "It is top level managers' fault for giving me unreasonable timelines which require me to speed?" Sure, the top managers is at fault, but individuals are also responsible for their actions.
  - mewpmewp2 3y ago
    If that commercial driver was slowly, but methodologically overworked, manipulated, fatigued and pressured into doing this with every incentive promoting speeding, then yes. Why did the driver feel compelled to speed in the first place? Why would there be an environment or incentives where this could be a valid strategy?
  - ChrisMarshallNY 3y ago
    Since you asked, there may be a few of us that remember this: https://www.ranker.com/list/dominos-30-minutes-or-less-lawsuit/genevieve-carlton https://www.ranker.com/list/dominos-30-minutes-or-less-lawsu...
throwfaraway100 3y ago
Yes, consequences for negligence and maybe licensure are the only way we'll solve this problem. It's easier to write software without giving a fuck, and if it remains profitable and without consequence, it will continue happening. If you can't write internet-connected software without making basic security errors, you shouldn't be writing software, at least not without the guidance of someone senior (actually senior, not two years post-bootcamp). I can't believe this is controversial. Lmao I love how suggesting that developers make take responsibility for their work is met with such hostility here. Nice job removing my comments, you jokes of "developers".

AlexandrB 3y ago

This flows from the top down. The consequences to companies that leak private data are so minor why would someone lose their job for risking a leak? At worst it's a fine that amounts to a slap on the wrist. Things that limit civil liability like mandatory arbitration clauses have made this worse.

rqtwteye 3y ago

"Start culling those who are doing the job poorly to start making space for others who may be able to do it properly" How about starting to cull top level managers who constantly put pressure on people, don't hire competent security people but reward quick results that create future problems?

buttcomputing 3y ago
[flagged]
theamk 3y ago
I dunno, if a commercial driver violates speed limits and hits someone, do we want to accept excuses that "It is top level managers' fault for giving me unreasonable timelines which require me to speed?" Sure, the top managers is at fault, but individuals are also responsible for their actions.
- mewpmewp2 3y ago
  If that commercial driver was slowly, but methodologically overworked, manipulated, fatigued and pressured into doing this with every incentive promoting speeding, then yes. Why did the driver feel compelled to speed in the first place? Why would there be an environment or incentives where this could be a valid strategy?
- ChrisMarshallNY 3y ago
  Since you asked, there may be a few of us that remember this: https://www.ranker.com/list/dominos-30-minutes-or-less-lawsuit/genevieve-carlton https://www.ranker.com/list/dominos-30-minutes-or-less-lawsu...

throwfaraway100 3y ago

Yes, consequences for negligence and maybe licensure are the only way we'll solve this problem. It's easier to write software without giving a fuck, and if it remains profitable and without consequence, it will continue happening. If you can't write internet-connected software without making basic security errors, you shouldn't be writing software, at least not without the guidance of someone senior (actually senior, not two years post-bootcamp). I can't believe this is controversial. Lmao I love how suggesting that developers make take responsibility for their work is met with such hostility here. Nice job removing my comments, you jokes of "developers".