Product security: barking up the wrong tree

[hpshelton]

---

layout: post type: link date: 2024-04-29 18:00:00 -0700 title: "Product security: barking up the wrong tree" link: https://lcamtuf.substack.com/p/product-security-barking-up-the-wrong permalink: /post/2024/04/29/product-security-barking-up-the-wrong categories:

• security
• programming

• software engineering

  In a company of 10,000, stuff like that happens with clockwork regularity; your security team is pitted against the sum of human ingenuity. You work to lower the base rate of security lapses, but even with the best tooling and education efforts, there’s that 1% or 5% you’re bound to miss. A breach is only a matter of time; your average CISO is losing sleep over this, not over buffer overflows.

[hpshelton]

post

[hpshelton]

https://github.com/hpshelton/hpshelton.github.io/commit/b6ab1b2fff705f28697f7cff73084db7360dfdc3

[hpshelton]

Posted by https://github.com/hpshelton/hpshelton.github.io/actions/runs/8888061632
http://hpshelton.com/post/2024/04/29/product-security-barking-up-the-wrong