Re:The OWASP Top 10 is killing me
by Spooky23 on Saturday October 28, 2017 @08:03PM
(#15577341)
I think the infosec community is the biggest barrier to improving security.
Security is like a bug light for ambitious idiots now. In large companies the function has been staffed up as a separate vertical with lots of CISSPs and other alphabet soup people who run around chasing nonsense and reporting how valuable they are.
Security expertise needs to be embedded in projects and programs so that leadership with domain knowledge can make smart decisions.
Re:The OWASP Top 10 is killing me
by deoxxa on Sunday October 29, 2017 @12:22AM
(#15577954)
It sounds like your problem is with the infosec industry rather than the infosec community. The community in general would agree with you about the industry being kind of broken, I'd say.
Security is like a bug light for ambitious idiots now. In large companies the function has been staffed up as a separate vertical with lots of CISSPs and other alphabet soup people who run around chasing nonsense and reporting how valuable they are.
Security expertise needs to be embedded in projects and programs so that leadership with domain knowledge can make smart decisions.