Interstitial risk: when two secure systems make one vulnerable one

rraphtheb about 18 hours ago 2 commentsRead Article on gneiss-group.com

⚡ Community Insights

Discussion Sentiment

50% Positive

Analyzed from 141 words in the discussion.

Discussion (2 Comments)Read Original on HackerNews

evan_a_a•about 14 hours ago

The author is describing a practice that is already well known: Systems engineering. Applied well, systems engineering helps prevent many of these issues from happening in the first place. Unfortunately, outside of heavily regulated industries or critical systems (like aerospace, as mentioned), systems engineering practices are rarely applied with the proper level of discipline.

raphtheb•about 10 hours ago

You are correct: the formal discipline of Systems Engineering, done with appropriate levels of rigor, fits this.

That said, in most software orgs, "systems engineer" doesn't mean that discipline anymore. When the title's actually used in job postings, it's almost universally infrastructure/ops, servers, reliability. The name got co-opted by a different, unrelated role in most software companies (At least the subset i have visibility into!). A hiring manager looking to hire a "systems engineer" for interface discipline would likely get a stack of infrastructure resumes instead.

That's part of why the gap persists. It's not that the discipline doesn't exist, it's that even its name doesn't point at it anymore for large swathes of the industry.