4 ms·
What's easier and more plausible to happen - Random J. reading a long processing-cycles-demanding guide or just following a checklist? Random J. seeing a link
by maayank 14y ago
What's easier and more plausible to happen - Random J. reading a long processing-cycles-demanding guide or just following a checklist?
Random J. seeing a link to/start of a guide: "that seems long and intricate... I don't have time to grok this and it seems like that kind of thing that to apply you need to grok and understand."
Random J. seeing a checklist: "ah, just following the steps. I can do this."
Maybe it's an inconvenient truth, but such checklists would be an overall boost to software security. Having straight-forward checklist to mechanically follow > Having no checklist.
Me and you would want to go behind that. Random J. Programmer wouldn't.
- beagle3 14y ago> or just following a checklist? Well, OP didn't suggest a checklist (he did refer to the Boeing one as inspiration, so he might have thought about that). And while they might be a hundred times more likely to follow a checklist, a hundred times (almost zero) is still (almost zero). Let me re-iterate the question/problem: > Random J. seeing a checklist: "ah, just following the steps. I can do this." The question is: why would Random J. see the checklist? This is the crux that needs to be addressed. The content and existence of the list, while important, is a much easier problem to solve.
- maayank 14y agoIt's true that there are people not being aware of the information now and they'll be people not aware of it in the future. But I think[1] there's a large group of people who are aware that the information exists, but are just ignoring it as they deem that info too complex/time consuming to learn. Enabling better security practices for this group would be an overall net gain. [1] Based on my past experiences, YMMV :-)