Hacker News new | ask | show | jobs
by genmud 923 days ago
Anyone in cybersecurity who isn't a fucking moron (of which I freely admit there are many), without a doubt knows the problems they solve are not unique. As someone who has done it for nearly 20 years, me and my colleagues absolutely despise having to repeat the same shit, over and over. I want nothing more than to not be necessary.

I liken my job to being a janitor, and people can't seem to stop from pissing, shitting and trashing everything. It's goddamn 2023 and we still can't get people to always validate input or ensure proper constraints are built in.
2 comments
slt2021 923 days ago
Computer Janitor is a more correct description that Security Engineer. Because at the end of the day we are cleaning up and tidying others' mess that they left. Whether it is random software dependencies, or glaring holes in firewall config, or missing OS patches/whatever.
link
Ekaros 923 days ago
Time after time most basic things are forgotten. Like should this user be able to do this action or read this data.

I don't expect magic, but at least cover the absolute basics. Then I might be able to figure out something more interesting or rare.

Or if I get report that something has CVE, just tell me if that is a problem for you or not.

link