Discussion about this post

User's avatar
Whiskey Tango Foxtrot's avatar

I only ever had one client that actually gave a shit about application and server security. I won't say the name, but they were a "name" insurer that has a crop insurance division.

They designated a security team and those guys were motivated and attentive. And they did what I told them to -- lock all of us consultants out of the system within two hours after we completed the project and left. I expect they had no security issues after we left.

Expand full comment
arcessita's avatar

Yeah, I gave them a pass for running a business on code that looked like somebody's nephew wrote it after he read one chapter of a PHP book (he clearly missed functions, loops, and if/else), because they were smart enough to seek help when it started averaging 2-3 second load times. Security was apparently too hard, though.

Expand full comment
254 more comments...

No posts