News for hackers. Stuff that matters.

A comment on Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” in User-Agent. Parent comment

Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by skrebbel on Thursday March 28, 2019 @02:33AM (#19509780)
Engineer Alice is the only person incompetent at their job in this conversation. If "irrepressibly existential sigh" is how you argue security with your bosses then maybe you're not senior enough to be in meetings like these.

The Manager and QA Engineers here depend on the expertise of the engineers. If the engineers fail to communicate key details of the situation, then that's on them. Sure, the boss is still at fault for depending on a shitty engineer for decision making, but that's all.

[ Parent | on HN ]
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by Aeolun on Thursday March 28, 2019 @09:05AM (#19511764)
If you answer with the existential sigh, you’ve had at least 20 conversations with a similar outcome before. Nobody arrives at a new company that jaded.
[ Parent | on HN ]
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by skrebbel on Thursday March 28, 2019 @12:17PM (#19513641)
I see your point and I suspect that that's what the author meant.

At the same time, I know lots of, well, arrogant nerds who get into "existential sigh" mode as soon as someone with less technical skill than them says something stupid. That's more how I read it.

[ Parent | on HN ]
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by Aeolun on Thursday March 28, 2019 @08:40PM (#19518098)
Ah, yes, I see how that is another valid interpretation.

I guess for me the word existential is a bit different. For an arrogant developer it would have been something like ‘long-suffering sigh’.

Unless, I guess, you feel you are so smart that your entire life is defined by interacting with morons :P

[ Parent | on HN ]
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by consp on Thursday March 28, 2019 @04:09AM (#19510262)
> The Manager and QA Engineers here depend on the expertise of the engineers.

Both should be sufficiently competent and knowledgeable to know this is a terrible idea, especially in the long run. Otherwise they do not understand the task they have been given. So no, Alice is not the only incompetent one here.

[ Parent | on HN ]