Hardcoded password in Confluence app has been leaked on Twitter

Re:Hardcoded password in Confluence app has been leaked on T... by mhh__ on Friday July 22, 2022 @07:23PM (#32198329)

Security people seem to vary from proper devs with an interest in security to "I used to be a marine now I'm a security contractor" methodology-obsessed types.

My faith in the former is strong, the latter category worries me.

[ Parent | on HN ]

Re:Hardcoded password in Confluence app has been leaked on T... by Hizonner on Friday July 22, 2022 @09:54PM (#32199439)

Actually, "devs" are typically not technically qualified either. You have to really understand how things work, not just be able to write a program.

But you're basically right. And now there seems to be a meme going around that it's elitist and inappropriate to expect people to have any technical understanding at all before they start dictating technical decisions around security, and all you need is a willingness to learn the alphabet soup of requirements and mindlessly apply the checklists.

[ Parent | on HN ]

Re:Hardcoded password in Confluence app has been leaked on T... by mhh__ on Saturday July 23, 2022 @02:14AM (#32200852)

I said proper devs, in my defense. The people I hang around with tend to know how things work.

[ Parent | on HN ]

Re:Hardcoded password in Confluence app has been leaked on T... by darkerside on Friday July 22, 2022 @09:32PM (#32199293)

The ideal is you have both types taking different approaches

[ Parent | on HN ]

Re:Hardcoded password in Confluence app has been leaked on T... by hsbauauvhabzb on Friday July 22, 2022 @08:44PM (#32198984)

I came from dev. I agree.

[ Parent | on HN ]