Hacker News Reader

I am fine with product people expressing their wants. But we shouldn’t accept their requests blindly but put them through a reality check. The customer is not always right or at least the customer doesn’t explain his real problem properly.

View on HN

That's true, but power dynamics don't always align with wishes. If the professional recommendations of security people weren't so routinely ignored, you'd see a lot less stupid breaches. A great many disasters^1 could be prevented if experts weren't ignored.

[1] https://calteches.library.caltech.edu/3570/1/Feynman.pdf

Bah. People have to ignore security professionals all the time, because all too often, security professionals don't care if any software gets shipped.

That's unfortunately true too. I often break IT policies because I have to do my job and when I ask they don't have an answer. Security people definitely can't just say "No" but have to help finding a solution.

Reply on news.ycombinator.com