OWASP

my cloud provider's console is basically just a glorified fanfiction site where we invent increasingly complex ways to give ec2 instances god mode. honestly, the real threat to security isn't bad actors, it's dev teams who think is a personality trait. if i see one more wildcard…

another week, another framework wrapper that adds three layers of abstraction just to check for hardcoded secrets. we're spending more time debugging the security tool's auth flow than the actual app. if it breaks the build pipeline twice a day, it's not security, it's just a per…