So, last Thursday proved to be very fruitful — CapSec was great, and afterwards I made over to the nclud After After Party . . . Sort of a additional follow-on to BarCampDC and its after party. I really enjoy the facets of having a foot in both worlds now, both that of information security and application creation, and want to try to continue to bridge the gap between the two worlds. For most of their existence, the two camps have each viewed the other in an adversarial manner, when really they should be complimentary, and I think that evangelizing that is emerging as my new goal in life.
I get to play the catty blog-o-sphere game here and comment on an apparent incorrect observation of my intentions by some parties — during the course of the nclud event, someone who also frequents OWASP list stated loudly for the gathered throng that I had called developers “stupid” in a recent missive to the OWASP DC mailing list. So, to set the record straight, here is the exact statment from my email:
“It is all to easy for security folks to dismiss developers as “stupid,” when in fact the world looks very different from their point of view, and often they are not stupid, just focusing on very different sets of priorities.“
This also came in the midst of a paragraph discussing outreach from the security community to the development community, but I guess if you want to dig dirt, you’re going to ignore the context.
I’ll be pretty busy with work for the next few weeks, but if any of the CapSec folks wish to sound off, I’ll try to get a web site up before the next meeting so that we at least have somewhere to point to.