>The trick is to get people to care about their security. Its 2015. If security isn't a priority by a project, then that project is just incompetent. That may

>The trick is to get people to care about their security. Its 2015. If security isn't a priority by a project, then that project is just incompetent. That may be harsh sounding, but are we really talking about security as optional with internet facing services? This is what happens when devs build their own systems without the experience of being a sysadmin. There's a lot of kitchen sink and duct tape "does it work? Yes, then we're done," mentalities at play here. Not enough people are worrying about maintainability and upgradability. Heck, most of these things ship with everything running as root. Its like we've regressed to the 90s with Docker and Docker-like technologies.