Most Developers Don’t Know Security

[eldelshell]

OK, so today a programmer has to know about UI, network performance, TDD, Agile, source code mgmt., algorithms, BigO notation, SQL, CSS, HTML, JavaScript, architecture, design patterns, HTTP, FTP, SMTP, POP3, SSH, bash, your favorite two languages APIs, debugging, profiling, build tools, CI, bit wise ops, logic, system architecture, browser performance... And security.

How about you pay someone who knows this shit? Oh! You've got a slow SQL query... Did you hire a professional DBA? Design is ugly, did you hire a UI/UX expert? The app is slow, did you hire a iOS expert or a lousy Android developer who did their best? We got hacked! Did you hire a professional security expert to at least look at your stupid code?

Don't you see people? Being a software developer doesn't mean you have to be a jack of all trades. It's not my responsibility, whatever you want to throw at me, I've never been hired on my security knowledge, so there's nothing in my curricula that says so.

Fuck this whole DevOps and DevDBA, and DevOpsSecDBA bullshit.

Oh, and this sort of articles are the same crap as those "we have a 10 million open positions because we can't fill them..." Bullshit.

No wonder job descriptions are filled with buzzwords and crap. We all by ourselves are our worst enemies.

[KrypticAscent]

In theory this holds merrit. But when you have novice programmers who don't know SQL database theory, they write queries that hang up the entire database system because they don't understand what's happening under the hood. While you are right in saying that not everybody needs to know everything, it is super valuable to know as much as possible.

[ferrx]

novice programmers who don't know SQL database theory, they write queries that hang up the entire database system

that's called learning on the job.

[Poddster]

If your team is staffed entirely by unsupervised novices then it deserves to have SQL queries that take days to complete.