News for hackers. Stuff that matters.
Re:Facebook exposed identities of moderators to suspected te... by PhasmaFelis on Saturday June 17, 2017 @12:15AM (#14574226)
> Security is hard.

So is nuclear reactor management, but we seem to be able to go decades between substantial reactor failures.

It helps if your company considers "move fast and break things" to be a cautionary tale instead of a fucking motto. This is the only industry in the world where people actually brag about doing slapdash work.

Re:Facebook exposed identities of moderators to suspected te... by dsacco on Saturday June 17, 2017 @02:57AM (#14574653)
There are fewer than 500 nuclear reactors in the world, and those reactors have massively higher oversight and mature safety compliance processes in place than the innumerable websites on the internet (for which approximately all of them share the same default state: insecure).

I understand the spirit of your point, but that's not at all a fair comparison. They're just altogether different things, and part of the problem is the nature of the tech industry, in which layers of complexity and security debt from different languages and frameworks can be piled on each other over and over again.

I think you should consider Dunning-Kruger here: instead of comparing Facebook's security to nuclear reactor safety, compare it to a company you believe has superior security; moreover, do you think you are appropriately qualified to condemn Facebook's security organization for the proportion of failures it experiences?