Post #2547186

"It's OK that X isn't done securely because we do Y and Z checks too" is not a reassuring statement. What you actually are saying is: "I knew this was insecure and did it anyway" — that tells me all I need to know. The last time someone said that to me, you'll never guess what I found when I inspected Y & Z. Spoilers: My next task was to teach a medium-sized company how to handle a #security incident.