An insurance company’s API exposed customers’ car location histories

Re:An insurance company’s API exposed customers’ car locatio... by jacquesm on Thursday May 11, 2017 @06:42AM (#14315078)

Here's an interesting thought: what with the money there is to be made in security these days programmers that actually know everything there is to know about security will leave applications development.

There is a good chance that the lure of security consultancy $ is resulting in a degradation of the quality of the applications.

[ Parent | on HN ]

Re:An insurance company’s API exposed customers’ car locatio... by sillysaurus3 on Thursday May 11, 2017 @09:23AM (#14315790)

There's not nearly as much money in security as most security consultants would like you to believe. It's in their best interest for most people to believe there's a huge amount of money waiting for you if you switch to security.

Unless you're someone with specialized experience (crypto), you as a pentester are worth around $100k/yr. That's excellent money, but it's not the massive margin that would drive people away from webdev.

[ Parent | on HN ]

Re:An insurance company’s API exposed customers’ car locatio... by bkkssnn on Thursday May 11, 2017 @08:04AM (#14315388)

Are you saying developers in general are subconsciously making low security products to raise the $ in security jobs globally, because they might some day switch career?

[ Parent | on HN ]

Re:An insurance company’s API exposed customers’ car locatio... by klez on Thursday May 11, 2017 @08:58AM (#14315630)

No, they're saying that if the money is in security, developers that know about security will go to security, and whoever remains as a developer will not be good at security.

[ Parent | on HN ]

Re:An insurance company’s API exposed customers’ car locatio... by saral on Thursday May 11, 2017 @07:17AM (#14315206)

Apart from this time to market is also one of the reasons that such things get released to end customers.

[ Parent | on HN ]