Conversation

Notices

1. Magister Endomain (endomain@hackers.town)'s status on Wednesday, 28-Dec-2022 04:19:45 JST Magister Endomain

   The thing that makes someone an expert in infosec or cryptography is not a certification, or special training, or a phrenological explanation of IQ, or whatever. You can find examples of security and cryptography minded people in all fields without any one thing except: engagement with the subject matter like it matters.

   This is why I think I'm so angry at the world of cryptography with its "never do anything but what we tell you" strategy. This is not how you get people to engage with the material in a thoughtful and safe way.

   And as time has gone on, this results in a growing crisis.

   • alcinnz repeated this.
   • Magister Endomain (endomain@hackers.town)'s status on Wednesday, 28-Dec-2022 04:19:42 JST Magister Endomain

     in reply to

     It isn't that everyone needs to be a cryptographer or a infosec specialist. But I think most people need to be able to *consume that work intelligently* to make software in 2022.

     But the reality is almost no one does, so we end up with these parceled and formulaic approaches to infosec that are often insufficient, and we socially penalize curiosity or inquisitiveness because "this is not your lane, React Developer" or whatever.

     But it is our collective lane, as people who make software. And we should all engage with it.

   • alcinnz (alcinnz@floss.social)'s status on Wednesday, 28-Dec-2022 04:21:32 JST alcinnz

     in reply to

     @endomain I think Bitwarden's written in React...

     Not the aspect I was paying the most attention to!