I'm a firm believer that if you want to start a tech company, at least one of the founders has to have a technical background. Even if you outsource all the work, you need to be able to ask the right questions related to security.

It's not just that this database was accessible via the internet. It was all public data. Storing people's IDs in a public database is just... wow.

But now we have amazing vibe coding tools that mean that you don’t need to be technical or whatever - you can just deliver results. After all, the best LinkedIn influencers and founders don’t care about how something is delivered, just what.

Yeah, we’ve finally, nearly, just got to the point where realizing that treating IT and security and such as simply a cost centre to be minimised maybe quite wasn’t leading to optimal security outcomes - to throwing it all away again.

Tech background isn’t sufficient. They need to have security background. Some of the worst people I’ve met with respect to security have been technical enough to have the wrong level of confidence.

Doctors need to study 5 to 8 years and pass rigorous exams Attorneys the same Structural architects and engineers the same

We have a couple of decades more until we lock tech up, up until now it was all fun and games, but now and in the future tech will be everywhere and will be load bearing

Isnt there like millions of misconfigured firebase dbs in the wild with no auth, some including fortune 500 companies?

https://www.bleepingcomputer.com/news/security/misconfigured...