Post #2547188

I've been employed as a developer by 4 companies that sold software. In ALL, I discovered at least one potentially-company-ending #security flaw. I also led #incident responses to active exploits in 3/4 that successfully contained breeches without catastrophic impacts. I want to believe this is all because I'm very good at my job. What I actually believe is that the bar for security knowledge & critical thinking is on the ground and I trip over it frequently by talking to people outside dev.