[concede_pluto]

If they aren't qualified to design with least privilege, what are they qualified for, beyond maybe cat videos?

[tptacek]

I've spent about half my professional career finding vulnerabilities in the software of developers who are convinced they're "qualified to design with least privilege".