How are young developers trained to cybersecurity?

14 points·Peyphour··4 comments

Hi all, I'm making a thesis for my engineering school and I would like to ask some questions for new developers who just entered the market.

Where did you study and how long was the formation ?

Did your formation provided you with cybersecurity training ?

And if yes, which aspects ?

And finally do you apply those in your current job ?

Optional: your age and location ?

Thanks for your responses !

View on HN

"How are young developer trained to cybersecurity?"

In short, they are not. Which is why you see so many high profile companies being hacked all the time.

Cybersecurity in general seems to be mostly approached in an after-the-hack, damage control and -repair manner.

Actual security architecture deliberations are rare, the fundamental properties of our tools, the operating systems, programming languages and software, ignored and unquestioned.

Almost all systems are unable to provide secure modularity and resource sharing, because they simply cannot isolate and account for the effects and requirements of their components.

Since most systems we use and built on top of today emerged in the pre-internet era, they were not built with these capabilities in mind.

First they are lied to and promised actual jobs even though the field is incredibly unfairly hard to get into. Then they are told to take the hardest possible cert that is often the least requested by HR, the OSCP.

Please explain the experience that has led you to write such an awesomely bitter post about this! :)

Reply on news.ycombinator.com