alt Hacker NewsThat's... a shocking level of lack of professionalism. I mean, as a software developer, when someone tells you to implement something, do you do it just based on the notes you took while your project manager discussed the task with you, or do you read the actual Jira ticket and use the information you (hopefully) find there? And we're (mostly) not writing software that handles nuclear waste...
Replies
HeyLaughingBoy • last Friday at 6:54 PM
Very often the notes contain a lot more information than the ticket. Tickets are often written by people who barely understand the problem.
➕ show 1 reply
Something to consider is that in a secure environment like LANL, and especially for a non-standard or one-off process, it's likely that there is no computer system that everyone has access to with all the information.
It would not be unusual for the person being told to write the process document to be brought into a room with a notebook, be shown written or electronic materials in the room, take notes in a provided notebook, have that notebook be handed over after the meeting for a (non-technical) security review, then receive the notebook pages some days/weeks later and have those notes be what is used to develop the document. Security culture is good for security but bad for error-free processes involving people.