Hacker News Reader

This is kind of a narrow view of security.

Plenty of risks arent vulns in public software. Some are vulns in your own software. Some are just deviations from best practises or lack of system isolation.

Even among public vulns with known PoC, the impact is going to depend on context. Plenty of times the impact is zero based on how software is used.

View on HN

It was a view in response to the above post, not a generalized view I take on things.

I’m actually a fan of embedding security resources into the eng teams and having those resources fix issues rather than toss shit over the wall. Knowing how software works is really hard without living inside the code base.

Reply on news.ycombinator.com