If it's a nice problem to have, don't solve it now

Re:If it's a nice problem to have, don't solve it now by ggggtez on Monday August 10, 2020 @11:27PM (#24116886)

And data security will come exactly: never. Because security is never the most important thing. A company that runs with this mentality will always be reactive, and never prepared for threats.

[ Parent | on HN ]

Re:If it's a nice problem to have, don't solve it now by davnicwil on Tuesday August 11, 2020 @06:29AM (#24118918)

Security is foundational. It's not something to add later. Without it, signup is not done and shouldn't be shipped. Ironically, not having the reset password functionality actually reduces security bug surface area :-)

[ Parent | on HN ]

Re:If it's a nice problem to have, don't solve it now by afarrell on Tuesday August 11, 2020 @07:18AM (#24119164)

Which is an argument in favor of leaving off some features. Don't half-ass password reset. Wait until you have the need to whole-ass it and make things conceptually-coherent.

[ Parent | on HN ]