Absolutely! I’m the last one to jump into the “AI is the death of society” pipeline, but we have to consider the long-term ramifications of sloppy security patching sloppy development. Are we just making sure the adversary continues to have an easy time getting to the juicy stuff?
"Security controls should be integrated directly into development platforms and workflows."
Which is a step in the right direction.
But as I've been saying for twenty years or more, the software development process ITSELF must be made more rigorous. How is that not obvious at this point?
We have a civilization based on sand right now. Soone…