1,528 karma · joined May 5, 2020
The consequences of poor security are often way, way lower than the costs of doing it properly. Add on to that, that security problems are contingent risks that only "pay out" in a small number of cases and you have a recipe for low expected value for investment into security.
Software engineers often want to develop a secure product, but they don't know what they don't know, and their employer is not interested in investment in their security capabilities, both the companies security capabilities and the capabilities of their employees.
In my experience it is that most software engineers are not incentivized to care about security.
Maybe you should read it.
Times that by the the number of external systems you rely on and you start seeing why we outsource that stuff in the first place.
We will just do to LLMs what we are already doing to people.
We spent the last 30 or more years turning universities into vocational schools and act surprised that students don't want to spend tens or even hundreds of thousands of their money to engage in exhausting controversy?
I'd assume most students want to get a degree and start getting paid. No matter if you are left or right leaning, a culture war in your back garden is a distraction from that.
Eve has just the right mix of reality and unreality to hook its audience.
Your religious freedom is not more important than my rights of speech or freedom from religion.
No wonder people are going back to piracy, it's just better in every way.
All of the above is fine, learning the history of and techniques in restoring things is cool.
The 90->270 car sees the right indicator and lets the other car passed.
The real answer is somewhere between the above and the 90->270 car waiting to enter the roundabout because it is not sure if the other car is actually going 0->180 or 0->270 because they are a shit diver that doesn't indicate on roundabouts.
Here in NZ car accident is much more natural to say than car crash.
Although even that has subtleties.
"I got in to a car accident" would be the normal turn of phrase, but if remove the "car" and the "I" then crash becomes more likely: "There was a crash on State Highway 1".
No, if your system goes off line for 20 hours a year barely anyone will notice, it will have way, way less impact to your business than spending the money to make sure that doesn't happen.
If corners need to be cut for valid business reasons then there shouldn't be any real push back from the devs, because they have the business context laid out for them.
Every dev I've ever worked with will say "yup, I understand. I might not like it, but I understand" when given the context of pushes for quicker delivery.
But that requires understanding on both side that you are sacrificing quality to hit a date, and that has its own costs.
Mostly this all boils down to: talk to people like they are you colleagues, don't order them around, find a solution together.
It is a rare person indeed that can do software development and think (and talk) in business terms. As a dev, being able to talk in business terms about the problems you face in creating software is really, really handy.
But I can count on one hand the number of POs, directors, managers that want to engage in that conversation with developers. Most of the time a solution is thrown over the wall and developers are told to build a thing.
An actual conversation about a business problem between the people that actually have the problem and the people that will build the software that (hopefully) solves it happens way, way less often than it should.