[Top19]

Are you kidding me?

All of those operations people should be immediately trained in cybersecurity and deployed literally anywhere in the country.

If you’ve seen the latest password dumps and how bad they are, cybersecurity is getting worse if anything.

Also, as of 2015 the Chinese had 60,000 dedicated cyber security engineers. This year the US I think has 9,000, maybe less, and they can’t even protect the US, much less the rest of the world (unlike the globally deployed US Navy).

Ops people are so important.

NOTE: I actually am an AWS Engineer and I like moving to the cloud, but still.

[matte_black]

China has one cyber security engineer per 22k Chinese and United States has one per 35k Americans. To match China we need to increase our amount of engineers by about 60%, or increase the effectiveness of an engineer by about 37%.

[walshemj]

and what exactly are these "cyber security engineers" doing in china or is this just a fancy title for those monitoring the take from china's surveillance state

[yakitori]

> All of those operations people should be immediately trained in cybersecurity and deployed literally anywhere in the country.

As someone with background in "cybersecurity". Most "cybersecurity" is automated now. Also, you need heavy background in math/computer science and programming background for cybersecurity. Something most Operations/IT people do not have.

> If you’ve seen the latest password dumps and how bad they are, cybersecurity is getting worse if anything.

That really has nothing to do with "cybersecurity". It's just operations "best practices".

> Also, as of 2015 the Chinese had 60,000 dedicated cyber security engineers. This year the US I think has 9,000, maybe less, and they can’t even protect the US, much less the rest of the world (unlike the globally deployed US Navy).

It depends on what a "cyber security engineer" is.

> Ops people are so important.

Sure. But it's also a highly automatable position too.

> NOTE: I actually am an AWS Engineer and I like moving to the cloud, but still.

AWS engineer? Do you mean you work for amazon or you work for a company that uses AWS?

[bomb199]

> trained in cybersecurity

I don't think I've ever met anyone in cybersecurity who was "trained in cybersecurity". At least not anyone useful. They're all developers first.

[joncrane]

The thing is, lots of "cybersecurity engineers" are useless. There are also good ones. I wonder what the relative proportions of usefulness are.

[eksemplar]

I don't disagree, but cyber security isn't going to get funding at the expense of welfare in a political organization in Scandinavia.

So we have to make do. :)

[cm2187]

I am not sure throwing more people at the problem will help. Developers need to stop making rookie mistakes. Parameterize all queries, question input coming from the client. Pretty much every major data leak was the result of someone doing something stupid like setting the permissioning to public on a repository rather than not being staffed to do it right.

[kalleboo]

> Developers need to stop making rookie mistakes

And how do you get them to do that?

You hire security engineers to do training, code reviews, internal pentesting...

[walshemj]

Experience is the way to "stop making rookie mistakes"

[cm2187]

I am afraid this is just more lipstick on the pig of a fundamental problem of the industry: the combination of 1) anyone can call himself a programmer and incompetence is widespread and 2) every company trying to maximize the data collection in the hope that will be valuable.