Re:Twitter names famed hacker 'Mudge' as head of security
by specialist on Tuesday November 17, 2020 @09:59AM
(#25124417)
"Maybe it's time to ask security questions during SE interviews instead of algos?"
I don't want to hear the answers. My faith in humanity is already hanging by threads.
I know this is my problem. It's really hard for me to not flip the Bozo Bit. To take both the good along with the bad every person has to offer.
Story time.
I worked near "Chris", a tech lead senior architecture fella. Same product group, different code bases, thank god. I disagreed with pretty much everything Chris said, but I accepted that we're all opinionated and it's more important to be consistent than to be right (correct). So long as his team kept shipping, Chris could do whatever he wants.
Until.
Because Chris was loud, large, older, and a boar -- exemplar of mansplainer -- he was influential. He convinced most of the people within ear shot (half of the floor) that password wallets were a terrible idea. I kept listening, to hear the rationale. Maybe he had a legit reason and I was the clueless noob.
Nope. "Single point of failure. If someone cracks your wallet, you're fully pwned."
Chris is why that product group could not, would not adopt any credentials (secrets) management strategy. It was all wikis and PostIt notes.
Reflecting back, it now occurs to me that hoarding the credentials may have been Chris' gatekeeping power move. Hmmm.
I don't want to hear the answers. My faith in humanity is already hanging by threads.
I know this is my problem. It's really hard for me to not flip the Bozo Bit. To take both the good along with the bad every person has to offer.
Story time.
I worked near "Chris", a tech lead senior architecture fella. Same product group, different code bases, thank god. I disagreed with pretty much everything Chris said, but I accepted that we're all opinionated and it's more important to be consistent than to be right (correct). So long as his team kept shipping, Chris could do whatever he wants.
Until.
Because Chris was loud, large, older, and a boar -- exemplar of mansplainer -- he was influential. He convinced most of the people within ear shot (half of the floor) that password wallets were a terrible idea. I kept listening, to hear the rationale. Maybe he had a legit reason and I was the clueless noob.
Nope. "Single point of failure. If someone cracks your wallet, you're fully pwned."
Chris is why that product group could not, would not adopt any credentials (secrets) management strategy. It was all wikis and PostIt notes.
Reflecting back, it now occurs to me that hoarding the credentials may have been Chris' gatekeeping power move. Hmmm.