Hardcoded password in Confluence app has been leaked on Twitter

Re:Hardcoded password in Confluence app has been leaked on T... by hsbauauvhabzb on Saturday July 23, 2022 @09:51PM (#32209476)

Take it from someone who works in the industry, this stuff is -hard-. I could go and be a developer with similar pay, think half as much, and have half as much responsibility. The industry is broken, and the subject matter is highly complex. Acting as if everyone is incompetent because nobody noticed a hardcoded Cred in a third party plug-in (until someone-did- notice it) alienates people from getting into the industry in the first place.

Security aren’t infallible, nor are developers, nor are you.

[ Parent | on HN ]

Re:Hardcoded password in Confluence app has been leaked on T... by dylan604 on Saturday July 23, 2022 @10:29PM (#32209713)

I'm saying the Dev that hardcoded a password is near incompetent. The fact nobody else working with that dev in code reviews found is near incompetent. I'm saying that you telling me as an auditor not checking the changes to the system after the software being audited is installed seems ridiculous to not be testing users etc as was claimed isn't normal.

Yes, we're all error prone. Some mistakes are innocent and triggered by multiple layers of things aligning, some mistakes are from not enough experience, some are malicious, some are just other things. Hard coding a password is damn near unforgivable though.

[ Parent | on HN ]