News for hackers. Stuff that matters.

A comment on The privacy wars are about to get a whole lot worse. Parent comment

Re:The privacy wars are about to get a whole lot worse by josephg on Wednesday September 07, 2016 @10:41PM (#12449866)
The reality is that today nobody is responsible for data security. Developers foist the risk onto consumers, who don't have any real choice in the matter, and don't even know what the real risk profile is that they (we) are agreeing to. If you accept that somebody, somewhere needs to be held responsible for data breaches, the most sensible party is us. We have all the domain knowledge and we're the only ones who can actually protect our user's data.

And I say this as someone who's spent time in consulting. The prices would necessarily go up in the face of litigation. But I think it would be well worth it - I'd love to be able to financially justify taking extra time to make the systems I build secure. (I make systems secure anyway of course, but I'm competing with companies packed full of General Assembly grads who don't know what a hashing function is yet.)

[ Parent | on HN ]
Re:The privacy wars are about to get a whole lot worse by ams6110 on Wednesday September 07, 2016 @11:06PM (#12450003)
So -- national building codes for software? Government instpectors who audit code? Building permits required to even write code, or modify existing code?

Doesn't seem to line up very well with "Move fast and break things"

[ Parent | on HN ]
Re:The privacy wars are about to get a whole lot worse by josephg on Thursday September 08, 2016 @12:01AM (#12450224)
> Doesn't seem to line up very well with "Move fast and break things"

When it comes to security around my personal data, I don't want anyone to move fast or break things. Businesses should either not bulk collect identifiable data or treat it with the care and diligence it deserves.

And while we're at it if 20 year old self taught rockstar programmers don't have the skills to do that, maybe they should learn. If you're making web software which stores personal information and you can't name 5 of the OWASP top 10 without looking them up, you're a privacy time bomb. I want my personal data far far away from your product.

When it comes to security, move slowly and fix your shit.

[ Parent | on HN ]
Re:The privacy wars are about to get a whole lot worse by ubernostrum on Thursday September 08, 2016 @03:12AM (#12450891)
Doesn't seem to line up very well with "Move fast and break things"

Maybe "move fast and break things" isn't an unconditionally great idea.

[ Parent | on HN ]