268 reputation
19
bio website
location USA
age
visits member for 1 year, 9 months
seen Oct 23 at 2:12

Aug
4
awarded  Popular Question
Mar
24
awarded  Popular Question
Jan
15
awarded  Yearling
Sep
3
comment Is there any reason to show the same message for invalid username as password?
Rate limit per account.
Jul
25
awarded  Nice Question
Jan
28
comment How Involved Should a Developer Be in Designing a Security Policy?
Not sure what your point is exactly, 'cause it kinda sounds like you're saying "security ppl are better that programmers". "Programmer" is just a job title and in a perfect world everyone is fully competent at everything, my question is about roles: What is the role of the developer, and really I mean the company offering software more than an individual employee, in designing security policy. The reason I asked this is because as a dev I want clear requirements. Many devs don't feel RESPONSIBLE for the security policy, it's "not their job", regardless of how competent they are or aren't.
Jan
25
awarded  Scholar
Jan
25
revised How Involved Should a Developer Be in Designing a Security Policy?
edited title
Jan
25
accepted How Involved Should a Developer Be in Designing a Security Policy?
Jan
25
awarded  Nice Question
Jan
25
awarded  Supporter
Jan
25
comment How Involved Should a Developer Be in Designing a Security Policy?
Yeah, I guess here's the part I struggle with: Customer #1 uses security policy A. Customer #2 comes along and they want security restriction XYZ added. Now, this is the same product in both cases being used for the same purpose, and in my case there's little to differentiate the risk from one customer to another. If customer #2 feels that their exposure cost/risk ratio warrants adding feature XYZ, shouldn't customer #1 really be using it as well? And since I'm in a position to force the issue, aren't a doing them a favor by doing so? As you point out, they might not even have a security pro.
Jan
25
awarded  Editor
Jan
25
revised How Involved Should a Developer Be in Designing a Security Policy?
added 468 characters in body
Jan
25
asked How Involved Should a Developer Be in Designing a Security Policy?
Jan
15
awarded  Autobiographer
Jan
15
awarded  Student
Mar
24
asked Is there any reason to show the same message for invalid username as password?