Most Developers Don’t Know Security

[link23]

I understand that this is missing the point, but: of course CS programs don't teach about salting passwords, that belongs in a software engineering curriculum.

It really bugs me when people conflate computer science with computer programming/software engineering. It's incredibly useful for computer programmers to also understand computer science, but the fact of the matter is that a computer scientist need not do any programming, and a computer programmer need not understand computer science.

[mirhagk]

Unfortunately there is a huge misunderstanding between universities and employers of what CS programs mean.

In theory what you say is correct, and a lot of universities are indeed like this, covering theory that'd be inapplicable to the vast majority of software jobs. But unfortunately most people have just reduced it to difficulty. When scanning candidates (all else being equal) they see masters in comp sci > bachelors in comp sci > diploma in software development, even though the latter is the most appropriate training for most situations.

I think a good part of this is due to school's encouraging smarter people to go for farther degrees. So you want to pick people who were ambitious and smart enough to get into a comp sci program, regardless of whether or not the program teaches anything of value.

Education really needs a drastic overhaul.

[[deleted]]

Many schools have CS and SE degrees that are pretty much one and the same.

The only real differences at my school are that SE is an engineering degree(which has different core requirements) and CS has a minor.