I see extreme comparisons, false binaries, and emotional framing, that is not really convincing me.

Loads of those just fall through the cracks of the system.

"solving the case" is mostly keeping all documented until they stumble on to something obvious, like already known perp having your stuff hidden in his stashing place while they go grab him for something unrelated.

Because for me it sounds like you might have awful lot of time to figure out your life.

In my previous and current post I am writing about an average person. I am pretty well off myself — what I was writing about I am far from dropping advice "just do X" on less fortunate. Because what is easy: "writing someone should do XYZ".

False dichotomy "if it is not IKEA it is 'artisanal' great quality" — well — no our forefathers would be able to afford whatever quality had local woodworking shop and imagine that a lot of places didn't have best of te best... So IKEA made average quality much better.

"general population doesn't have the discipline for it" — only that this feels somewhat condescending.

Let's agree that counting macros or going for calorie deficit is hard if it is not someones job. General population has other jobs, family, social life, other hobbies they enjoy more than fitness. It is not "just eat less" it is "spend considerable amount of time thinking about and planning your eating".

It definitely is not "you can just go on a calorie deficit", that is how jo-jo effect works.

For average person that has children, full time job, and whole range of adult responsibilities it is hard. Not impossible but hard, this is why people are looking fo easier solutions.

Authorized is:

Restricted push access. Access to main follows business function: every engineer at Amp can push, and most of Amp is engineers. But the percentage of people with access matters less than being able to explain exactly who has it and why.

So like you know exactly who can push the code and let's say random from marketing can't push code because he is not authorized.

SSH RCE is a super expensive exploit - no one is firing that one while it still is a 0 day without having really important reason or juicy target.

SSH with key-key only or WireGuard/VPN on top are exactly what everyone uses for daily driving.

In reality you should use that and then use host based firewall anyway.

Looks shallowly philosophical, based on "me and my friend". Equating "economy" to some small subset of white collar work.

Have to say world is much bigger place and there are other jobs than filling in tables in Excel spreadsheet.

[0]https://news.ycombinator.com/item?id=49232221

Those 2 years were to do the data migration and of course there were different priorities, if that would be priority we would do it in 1 month, but we liked to spread risk over time.

Reason was of course performance issues and not really needed joins, where normalization didn't bring any benefit.

In TFA there is no single issue of actual things that web developers could be blamed for.

CSP not mentioned I assume it was correctly configured, site has https, site is using SSO from providers not storing passwords.

All security failures in this instance are stemming from bad customer flow, using silly domain, even "poorly placed" security element was most likely designed to be in that place by some designer not any web developer. While all the other things done by a business/marketing/UX and I bet Cloudflare has loads of cybersecurity people who should be asked to review the customer flow and not a web developer.

Marketing people just make bunch of marketing domains. Business people push all kind of BS ideas.

No one is asking Web Developers about their opinion man.

STOP making everything developers fault.

I hope you will not get into too much trouble and it will be a learning experience for you.

But if I would have to make a call, I would take it down immediately.