3 ms·
I'm not a fan of security checklists that don't provide an explanation or references on why something is or isn't a high priority item.
by redundantly 2y ago
I'm not a fan of security checklists that don't provide an explanation or references on why something is or isn't a high priority item.
- sgc 2y ago100% agree, but the first item is status: work in progress, and the second item is the todo list with 'add rationales' and links as the top issue.
- redundantly 2y agoThe repo is five years old and hasn't been updated since its creation. It's a bad list.
- chgs 2y agoSo many things here that might be good but without saying what you’re protecting against and what the tradeoffs are it’s meaningless. Plenty of places will offer you such lists, many of which will cause more harm than good in specific circumstances
- j45 2y agoAgree but easy enough to look each up or have something like perplexity direct you to articles to verify