4 ms·
Seems like they ought to be dedicated security teams monitoring for exactly this: does a key to X give users access to not-X. Even more bizarre is their VDP tea
by ryanjshaw 7mo ago
Seems like they ought to be dedicated security teams monitoring for exactly this: does a key to X give users access to not-X. Even more bizarre is their VDP team not immediately understanding the severity of the issue.
- ori_b 7mo agoAnd slow down the time to ship things? The shareholders wouldn't like that.
- SlightlyLeftPad 7mo agoThose poor poor institutional shareholders…
- jascha_eng 7mo agoThat's how you slow down development to a crawl
- vincnetas 7mo agoYeah, lets just start building a house and don't wait for architects to finish the blueprints :) They just slowing us down with all that thinking things through stuff.
- bandrami 7mo agoThat's fine. Right is better than now.
- abustamam 7mo agoI don't see a problem with this. The problem with "move fast and break things" isn't the moving fast part, it's the trail of broken things that no one bothers to fix. When those broken things affect people's wallets, that's when we have problems.
- otikik 7mo ago"Don't worry, we have Gemini looking at this very issue right now for all teams"
- mafuy 7mo ago"I know, I'm reading along!"
- StilesCrisis 7mo agoThey do have dedicated teams for exactly these sorts of concerns. They are also swamped with projects and so they can't review big new changes overnight. Google is very likely shipping first and asking questions later.