3 ms·

It can't have the features that would have been built, in the time spent learning about and implementing security. I regard nearly all security for startup-cla

It can't have the features that would have been built, in the time spent learning about and implementing security. I regard nearly all security for startup-class, low-user, and low-value companies to be premature optimization, which is deadly to a new project's potential.

marcosdumay 11y ago
I see. Copying the javascript you use into somewhere on your own site does take too much time.
jacquesm 11y ago
> I regard nearly all security for startup-class, user-less, and low-value companies to be premature optimization. I can't see anybody working on user-less websites anyway but I sincerely hope that you'll make it plain which start-ups you work for so I can avoid them. Security and abuse potential are very important for start-ups because you have only one reputation and if you lose that you're pretty much done for. I can point you to several pretty harsh reminders of how start-ups that don't take end-user security serious can end up.
larrys 11y ago
One thing that I have seen over many many years in business is the need to decide where and when to cut corners and take chances. I have definitely seen that after the fact you could feel "geez I should have done that how stupid" but before something actually happens things aren't so clear that resources and time and money should be spent preventing something from happening. I have noted that if I did everything perfectly (and I am not talking specifically about money) I would never have made any money at all. (Exaggeration for effect.) There are always things that you can think of that seem like a good idea and you can't do all of them. I take the time and put in the money and effort to rotate and store offsite backups. However in all of these years that has never been needed. But God knows we all are aware of a ton of small businesses living on the edge who probably don't have good onsite backups, let alone offsite and they do have information that they need.
jfb 11y ago
Then let them die.

marcosdumay 11y ago

I see. Copying the javascript you use into somewhere on your own site does take too much time.

jacquesm 11y ago

> I regard nearly all security for startup-class, user-less, and low-value companies to be premature optimization. I can't see anybody working on user-less websites anyway but I sincerely hope that you'll make it plain which start-ups you work for so I can avoid them. Security and abuse potential are very important for start-ups because you have only one reputation and if you lose that you're pretty much done for. I can point you to several pretty harsh reminders of how start-ups that don't take end-user security serious can end up.

larrys 11y ago

One thing that I have seen over many many years in business is the need to decide where and when to cut corners and take chances. I have definitely seen that after the fact you could feel "geez I should have done that how stupid" but before something actually happens things aren't so clear that resources and time and money should be spent preventing something from happening. I have noted that if I did everything perfectly (and I am not talking specifically about money) I would never have made any money at all. (Exaggeration for effect.) There are always things that you can think of that seem like a good idea and you can't do all of them. I take the time and put in the money and effort to rotate and store offsite backups. However in all of these years that has never been needed. But God knows we all are aware of a ton of small businesses living on the edge who probably don't have good onsite backups, let alone offsite and they do have information that they need.

jfb 11y ago

Then let them die.