4 ms·
It's unbelievable how little most developers care about security. At this point I've given up on educating them since it went nowhere, instead I'm locking down
by progbits 2y ago
It's unbelievable how little most developers care about security.
At this point I've given up on educating them since it went nowhere, instead I'm locking down permissions to things like firewall and secret vault so random people don't fuck it up.
- wahnfrieden 2y agoTheir managers don't incentivize them spending time on it, and their PM will fight security tickets they don't understand the need for. Most devs have little autonomy at orgs today and operate under a strict hierarchy of command at the ticket level.
- pbhjpbhj 2y agoPresumably, "we're been storing 600 Million passwords in plaintext" is understandable to their PMs given its understandable to complete laymen. Aren't FAANG companies supposed to employ the very brightest minds. Hard to imagine this wasn't done on purpose.
- throwawaysleep 2y agoUsing the terms, wallet, threat, or prestige, make me as a non aultristic person care about the security of the systems my employer owns.
- radicalbyte 2y agoI don't see that in capable developers (who usually end up pushed to "backend") but it is absolutely endemic in frontend and extremely problematic in organisations which have full stack created frontend-first. All too often even the super seniors / leads have a very limit knowledge of security (or performance, reliability etc).
- deleted 2y ago[deleted]