Hacker News Reader

> It's not okay to have a breach. It's not. It doesn't matter how much money you saved...

If only this were true, they would be hiring security people.

Nothing is going to change until companies are held accountable for the damages caused by negligence. If someone in the infosec field wants to make a difference, I'd reckon their best bet is lobbying to make this happen.

View on HN

We're hiring security engineers at Clever: https://clever.com/about/jobs#engineer-full-stack-security

That's good! You guys probably have tons of personal data from students who didn't choose to use your service anyway, but their school made that choice for them. Be careful with it!

I think it's safe to say "thank you" on behalf of the students and teachers who won't ever know that you went the extra mile.

From first hand experience I can tell you that Uber was recruiting to start their information security program at least 18 months ago and when I spoke to their software engineers and SREs they had a decent understanding of modern security issues.

In the 18 months since I assume they have assembled a decent security team and while most likely Uber dropped the ball here at least they recognized the need for security before they got burnt.

Reply on news.ycombinator.com