Re:Ron Rivest's MIT Computer and Network Security
by mhurron on Tuesday May 08, 2012 @11:19AM
(#3944024)
> Is it expected that all software engineers are knowledgable in computer and network security
Honestly, at least in larger companies, it is expected developers know how to write in what ever language the company works in and that's it. I don't even think that they have to know how to turn their own development machine on.
They don't understand simple security practices. They don't understand that they don't need root for their build process. They don't understand their code should not require root to run. They don't understand why there are access controls on anything.
If you learned any of that, even just the basics of system and network security practices, you would be head and shoulders above most other candidate anywhere for any development position. Nothing you do exists in a vacuum. Knowing a little bit of how the bigger picture relates to your specialty area is a benefit.
However if you don't really have time, don't worry about it. A good amount of healthcare software has horrible security at the software level so it's obviously not that important to them.
Honestly, at least in larger companies, it is expected developers know how to write in what ever language the company works in and that's it. I don't even think that they have to know how to turn their own development machine on.
They don't understand simple security practices. They don't understand that they don't need root for their build process. They don't understand their code should not require root to run. They don't understand why there are access controls on anything.
If you learned any of that, even just the basics of system and network security practices, you would be head and shoulders above most other candidate anywhere for any development position. Nothing you do exists in a vacuum. Knowing a little bit of how the bigger picture relates to your specialty area is a benefit.
However if you don't really have time, don't worry about it. A good amount of healthcare software has horrible security at the software level so it's obviously not that important to them.