[NBLUG/talk] acceptable risk

Bob Blick bobblick at ftml.net
Wed Nov 20 09:03:39 PST 2013


On Wed, Nov 20, 2013, at 08:13 AM, Kendall Shaw wrote:

> I am employed as a computer programmer. Security polices are being 
> developed where I work. It is not my job to deal with the issue, but it 
> is going to affect my ability to do work. One major concern that I have 
> is that it doesn't appear to me that people understand the concept that 
> you can never be 100% secure.

> Do you have any advice?

Hi Kendall,

Just my two cents, I'd advise learning about the situation as much as
possible, but since you say it's not your job, I'd really advise keeping
out of the way. That's just me speaking from the standpoint of someone
who has stuck their neck out before. It's usually not welcome, and if
you like your job otherwise, keep it or else look for another job.
Because even if you try to help in a constructive way and end up on the
security team, most companies don't want to invest a lot of resources in
non-visible things, and you'll be frustrated when you are asked to help
develop a system they don't want to do right. Or maybe they are just not
super smart, in which case, look for another job anyway, because it's
much more fun working with smart people.

Friendly regards, Bob

-- 
http://www.fastmail.fm - The way an email service should be



More information about the talk mailing list