77 days ago · Tech · hide

Thank you, Matthew, for sharing your thoughts on this matter. Indeed, it is a very interesting time keeping up with the latest LLMs from a security perspective. I do not share the same beliefs and I want to take a moment to evaluate. As a programmer, I have observed that product teams are incentivized to deploy new features or change product scope. They care about the user objective in our sprint and cadence being deployed, and how quickly it can be shipped. The product organization of a business rarely faces repercussions if the product leaks customer data or has vulnerabilities. This is seen as a technical problem and table stakes for an engineering organization. Yet when engineers advocate for more time to fix bugs, review vulnerabilities, and update penetration tests, there is always pushback. Security comes from the CTO, CISO, or Risk functions of organizations. Without effective standards, policies, and procedures in place, this process is left to engineering managers to sort…

Commenting on Bubbles has been removed. Why? If you want to talk about this post, write to the author, use the comments on their blog if it has them, or reply with a "RE:" post on your own blog. Suggestions? feedback@bubbles.town