4 ms·
I understand what you're saying I think. My point is that with our massive amount of inner-connectivity today I want regulated assurances that my financial secu
by TheCapn 12y ago
I understand what you're saying I think. My point is that with our massive amount of inner-connectivity today I want regulated assurances that my financial security or hardware wellbeing is handled by someone who is vetted professionally for being competent.
If the JS guy wants to go through the rigor to learn the tools to be a great security expert he should be able to. Heck, I wouldn't refer to him as a "JS guy" at that point anymore either. I want an industry where there is a vetting process to prevent frauds or incompetence from creating issues prior to the issues existing. Some amount of assurance, or accountability. We currently sort of work on "best-intentions" in that regard.
Engineering in it's traditional fields has gone through this growth pain. In some cases many lives were lost in the process of learning that there should be a regulatory body overseeing who is allowed to sell themselves as competent practitioners. Consider the state of OpenSSL when Heartbleed came about. There was most definitely a series of fundamental issues at play that weren't brought to light until after its hayday, but as an industry we sort of have the mindset of "these types of things are inevitable". I can't say concretely where I stand on the matter but I do believe a higher level of accountability would be a net positive for public perception. This is a very loose example, its a complex topic that would take far longer to debate in full I think.
On the flip side too is the idea that "Software Engineering" becomes a protected field where its important. I mentioned my domain is control systems, but so many of the tools I work with are years behind more modern frameworks and technologies that are used outside my industry. I have embarrassingly low amounts of tools to test the programs I develop, its mostly a rigorous manual testing procedure that gets done to say I'm satisfied and I'm responsible for this application. I blame, in part, the fact that this work is more often done by Engineers in other domains. They don't know what modern software development has overcome and created. Some of the routines and applications I inherited moving to this position were embarrassingly poor and thankfully never caused real-world harm mostly due to the numerous tiers of safeguards that exist in designs. Its like coding with exceptions but being fine with it because there's a Catch somewhere higher in the operating environment.
I suppose I might be in the wrong place here as this is HN a more Startup-centric tech forum. I've long disagreed with the mindset that software engineers need to "upset the established norm" in a lot of fields. Medical is a big one lately that's getting a lot of traction. There's a balance that should exist between regulated gatekeeping of fields for the public good and legislated protection over fields to prevent outside interaction.
I feel I've ranted a bit. This truly is a complex topic which I think I'm still establishing a position on as I grow and get experience in the industry. I know where we are _currently_ isn't right in the long run, but taking the term "Engineer" to be as by-the-book as possible to the traditional fields of engineering isn't right either.
- icebraining 12y agoMy point is that with our massive amount of inner-connectivity today I want regulated assurances that my financial security or hardware wellbeing is handled by someone who is vetted professionally for being competent. Oh, he will be. Of course, now you have to trust the vetting organization to actually do their job. And why exactly would they, if it's better to raise prices and vet anyone who can afford them? I want an industry where there is a vetting process to prevent frauds or incompetence from creating issues prior to the issues existing. And in which industries does that happen already? How can you tell it's the vetting process (and not any other factor(s)) that is reducing the fraud and incompetence?
- angersock 12y agoNo worries--it is very much a complex problem. I'm a mechanical engineer by training, a software engineer by profession, and I'm actually working in the medical startup space. :) So, I absolutely appreciate that there are nuances to all of this, and I'm glad to see you thinking it over. I think some of the things we absolutely do wrong as an industry: -> lack of common nomenclature for problems (design patterns comes close, but then we look at all the buzzwording of other things, and argh) -> lack of language-standard test suites for things. There are more than five or six, for example, for JS, all of which scratch a slightly-different itch. This is absurd. -> lack of domain-standard test suites for things like numerics. We can't easily and reproducibly compare implementations across projects or languages for different problem domains. -> lack of standard engineering practices for team development and project management. Those are things that, I think, we could at least establish baselines for without jeopardizing our ability to deliver cool new shit on time.