4 ms·
Creating an FAQ for these companies would be useful. Something to arm the devs who work at these places with something when they go to management who's reactio
by bdg 12y ago
Creating an FAQ for these companies would be useful.
Something to arm the devs who work at these places with something when they go to management who's reaction is "yeah I know it's bad.. but... like, we have important shit to do."
- omervk 12y agoWhat would you suggest?
- jchung 12y agoAssume the company is unaware that their developers have implemented the password this way. The FAQ for the company should highlight the exceptionally high cost of losing customer data, the distraction for their team from dealing with any breach, and the incredibly low cost of making the fix. The call to action could be for them to email their developer a link to your dev FAQ, demanding a fix.
- omervk 12y agoThat's a great idea! I'll add "I've been listed! What do I do?" to the FAQ. Thanks!