Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 10813

Security is the degree of resistance to, or protection from, harm. Workplace questions should only be tagged with this if they relate to actual security concerns (physical or digital) and are specific to the workplace. See extended tag info for usage guidelines.

5 votes
Accepted

Github permission issue from developer's perspective when working on someone else's Organisa...

Your contract is a legal document. You enforce it using the court system. If you cannot trust the court system to enforce the contract (maybe the company is outside of your jurisdiction or has better …
nvoigt's user avatar
  • 146k
3 votes

Need Advice On Cyber Security Career Path

Junior Security Researcher Researching and building those tools. Junior Web Application Security Engineer Securing a potential target against threats. … So it seems what you described would be the Security Researcher. However, please be aware that job titles are not fixed. …
nvoigt's user avatar
  • 146k
2 votes

I have noticed that a potential employer's website has been compromised - should I mention i...

Don't tell them in the interview. No matter how they handle it, no good can come out of making their mistake visible. Tell them only if and when they hire you. Because if they don't hire you... why …
nvoigt's user avatar
  • 146k
9 votes

Secure code review requirement for cybersecurity engineer hiring

It should be normal to have development run those scans while developing and security to run them again (or request the reports) just to make sure development did their jobs or to find vulnerabilities … I think you are way ahead on the maturity curve by just having a cyber security department or team in the first place. …
nvoigt's user avatar
  • 146k
3 votes

May a company look at the local drives and folders of the employees?

When nothing else is said, it is implied the owner can do as they please. It is also implied that you only do company specific things with the company equipment. Whether that is a computer, that you d …
nvoigt's user avatar
  • 146k
6 votes
Accepted

How to approach IT security and legal issues with unwilling boss?

I have no experience with apprenticeships in France and I am sure the legal framework is different in it's details. But I will assume the basic principles are the same as in Germany. As an apprentice, …
nvoigt's user avatar
  • 146k
56 votes

How to communicate to developers about security vulnerability detected when not included in ...

I am a developer and basic security is implied when I deliver a product. That should not need to be in a user story. … If you don't have basic security guidelines all of your developers adhere to without spelling them out every time, you need some. Yesterday. …
nvoigt's user avatar
  • 146k
0 votes

Dealing with a development VM with no internet connection

The restriction is an artificial company policy. If you are the guinea pig, then it is for a reason: they want to find out if it works. Document all problems you have, document possible fixes (own Nu …
nvoigt's user avatar
  • 146k
106 votes

How can I state to junior engineers to not work a ticket unless he / she can own the task wi...

Your assumption seems to be that junior employees can work unsupervised. It is the very essence of juniors that they need seniors to guide them. They cannot work unsupervised. They don't know what the …
nvoigt's user avatar
  • 146k