Hacker News Reader

That's most certainly the reason.

I sometimes have to support freelancers working in some of our Wordpress websites. Their first instinct when something is wrong on their end is asking me to run a chmod or chown command they found on Google on the whole directory. Not that it matters – we're using Docker.

Security seems to be secondary when the priority is to just deliver.

View on HN

Security should be secondary. I know that sounds wrong. And that’s not an absolute, sometimes security comes first. But in general, everyone is trying to get stuff done and security gets in the way. My passwords get in the way of using my devices. My keys gets in the way of coming home.

That’s different from saying “security should be an afterthought”. Security is something you should consider consciously and prioritize against your other goals.

Putting security first is kind of weird if you think about it. Imagine building a house and prioritizing the locks.

Several billion people don’t have easy, immediate access to your house locks.

> Security seems to be secondary when the priority is to just deliver.

Security is always an afterthought to those who don't actually understand it.

Reply on news.ycombinator.com