6 ms·
Almost nothing is built by security engineers, including security features of security products at security companies.
by wolf550e 10mo ago
Almost nothing is built by security engineers, including security features of security products at security companies.
- arcfour 10mo agoI'm a security engineer, I have built things like this, and I made the original comment. A lot of my job revolves around developing automation for security needs. Also, many of the top 100 domains serve user-generated content (like AWS/S3). Blindly trusting anything from them just because they are big is so woefully misguided it boggles my mind; I seriously doubt that anyone is actually doing what is described in the article.
- huflungdung 10mo ago[dead]
- 8organicbits 10mo agoIdk, I have done security audits for startups and small tech companies. They won't have a security engineer on staff and are "moving fast and breaking things". I've seen things much more misguided than this.
- arcfour 10mo agoI just finished working at a small company like what you are probably describing. It was...horrific. But I try not to think about that anymore!