[dogecoinbase]

> Security is not easy, and the entire field is not negligent - the problem is massively asymmetrically stacked against security practitioners, enhanced by poisonous attitudes like the ones expressed here.

Is remaining in a role in which it's not possible to be effective negligent?

[beardedwizard]

What is your alternative? Should we do nothing instead? Should all SWEs quit because they can't stop writing security bugs?

[dogecoinbase]

I don't have a specific alternative, but I think that if it's not possible to be effective in a role, one should decline it. It's possible to be an effective SWE while still writing (and hopefully also sometimes fixing) bugs.

[beardedwizard]

One could argue the security industry exists because of the failings of computer science.

Maybe swes should start facing legal liability for thier failings like most other engineering disciplines. We would see this problem change overnight.

[Tostino]

By productivity going completely down the drain.

[beardedwizard]

that is not happening in commercial engineering though is it?

[lamontcg]

Should doctors quit and find another field because people keep on breaking their legs?

[mango7283]

If doctors not only had to treat broken legs but also somehow prevent people breaking them in the first place...