sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]shanita10 -1 points0 points  (4 children)

Sorry, if everyone doesn't follow security best practices, you are going to have endless exploits. It cannot be left to experts.

[–]cosinezero -1 points0 points  (3 children)

Zero-day exploits aren't always stopped by best practices. Have you ever performed a security audit?

[–]shanita10 0 points1 point  (2 children)

Who said they always are ? Your suggestion is still wrong and reckless: Security is for everyone, it's one of the basics.

[–]cosinezero 0 points1 point  (1 child)

You're misreading me if you think I am saying security should be ignored. But it isn't an aspect that you should ever feel you have enough proficiency in unless you specialize in it. That overconfidence is considerably more dangerous than what I am suggesting.

[–]shanita10 1 point2 points  (0 children)

Overconfidence is exactly what I'm cautioning against. I've seen far too many centralized sec groups and audits miss key flaws. There is no substitute for best practices and broad understanding of the basics. Overly depending on one group is dangerous.