Re:Things I Learned to Become a Senior Software Engineer
by mettamage on Monday September 07, 2020 @08:39AM
(#24399013)
You're making a lot of assumptions about my situation that you can't backup with evidence. It might be true. It might not be. But you seem to make a strong stance for that I worked on apps with low stakes/impact and that they were fairly simple. You don't know that, so why paint that view so strongly?
> On a side note, I don’t agree with bootcamps as they don’t teach the core principles of computer engineering and software design.
I did both. I studied CS and happened to work as a teacher at a coding bootcamp while studying CS.
> Coding is just a skill, and you need some fundamental knowledge behind it in order to execute it safely and robustly.
Emphasis mine.
I disagree with this. I've seen many experienced software engineers knowing nothing about how to hack (important for safe code execution), I've had a couple of courses in it and did some hackthebox.eu after that. So I know as much about hacking as I know about software engineering, I'm a junior in both cases. Nevertheless, I am the one that finds major security vulnerabilities in the code of the company I work for.
A lot of security issues isn't fundamental as the "fundamentals" are things like: "look for configuration errors" or "look for hardware bugs that hardware vendors haven't looked deeply enough yet" or "look for a place where humans are careless" (e.g. the suidbash vulnerability is an example of the last one). That's a lot fuzzier and vague than CS fundamentals.
> On a side note, I don’t agree with bootcamps as they don’t teach the core principles of computer engineering and software design.
I did both. I studied CS and happened to work as a teacher at a coding bootcamp while studying CS.
> Coding is just a skill, and you need some fundamental knowledge behind it in order to execute it safely and robustly.
Emphasis mine.
I disagree with this. I've seen many experienced software engineers knowing nothing about how to hack (important for safe code execution), I've had a couple of courses in it and did some hackthebox.eu after that. So I know as much about hacking as I know about software engineering, I'm a junior in both cases. Nevertheless, I am the one that finds major security vulnerabilities in the code of the company I work for.
A lot of security issues isn't fundamental as the "fundamentals" are things like: "look for configuration errors" or "look for hardware bugs that hardware vendors haven't looked deeply enough yet" or "look for a place where humans are careless" (e.g. the suidbash vulnerability is an example of the last one). That's a lot fuzzier and vague than CS fundamentals.