Re:Securing Your Site Like It’s 1999
by JasonFruit on Wednesday December 12, 2018 @12:38PM
(#18665888)
> How can you brag about the fact that a software engineer who knows security is worth more on the market, then try to claim that every engineer needs to know how to write highly secure code? Those are incompatible ideas.
Software developers who have the abilities they should are more valuable than those who . . . don't. That doesn't seem controversial.
How can you brag about the fact that a software engineer who knows security is worth more on the market, then try to claim that every engineer needs to know how to write highly secure code? Those are incompatible ideas.
A lock manufacturer designs locks. A carpenter designs the building the lock is securing.
You wouldn't rely on your carpenter to build you a lock, because you understand that they are two separate domains of knowledge. You need to have this same mindset about good security and good engineering.
Digital security requires a high amount of specialized knowledge and involves far more variables than lock construction. It also requires constant vigilance and integration, where as a lock is fire-and-forget.