HN user

punkcoder

22 karma

my public key: https://keybase.io/punkcoder; my proof: https://keybase.io/punkcoder/sigs/GCg5wS3ZZnax9wJxHwZ82mm_esvIUszLC8NtDoiWdjI

http://punk-coder.com

Posts4
Comments10
View on HN
[dead] 2 years ago

Test-Driven Development (TDD) is a development methodology that prioritizes writing tests for code before the code itself, followed by writing the code to pass those tests. This approach not only ensures the functionality of the code but also presents an opportunity to address security concerns, particularly validation bugs, early in the development process.

In the last blog we talked about what everyone assumed was the most boring topic that you could talk about, keeping your dependencies up to date. But I think I’ve got it topped this time, this time we are going to be talking about that number one thing that all developers love spending their time working on... Logging.

The differences between application security and developer security are simple enough in principle, but go significantly further as soon as you get past the surface. Many people in the cyber security community seem to place a great emphasis on the effectiveness of application security but in many cases, will completely negate the secondary portion of this which is securing the individual who is responsible for introducing security bugs to the software. I'm not saying that to be harsh, mistakes are a simple part of life and without the proper tooling and education it is very easy to continue to produce mistakes especially when greeted with constricted timelines and consistent budget crunch.

[dead] 3 years ago

If you are allowing MFA from SMS you should probably not do that.

The statement was more in the direction that when it's a utility local people / municipality are responsible for the maintenance of that system, local people means that there is a far greater chance of getting local, mostly because there is someone local with _responsibility_ for keeping it working.