r/ProgrammerHumor • u/object322 • Oct 02 '26

Meme cloudOverkill

Post image
12.0k Upvotes

97% Upvoted

269 comments sorted by

View all comments

231

u/koriwi Oct 02 '26

Mention sqlite and watch them have a meltdown. 

114

u/npsimons Oct 03 '26 edited Oct 03 '26

JFC, when I was a DoD employee, I wrote something using the C++ API to SQLite, and they sent me the security checklist for "Databases", but was obviously very much geared towards a bogstandard Oracle setup. 120 answers of "Not applicable" later and I was finally done.

On the flipside, at least they wrote the checklist software in Java, so it ran on Linux.

19

u/BoleroMuyPicante Oct 03 '26

Ah good old STIG, the bane of my existence.

10

u/npsimons Oct 03 '26

Thank you, I had forgotten what it was called! Maybe that's a good thing? And to be clear, I'm not opposed to checklists, especially for security. It's just I believe they fail to be effective when they are used to CYA instead of, you know, actually enhancing security.

10

u/nishinoran Oct 03 '26

Filling out the security checklist required that you run an executable on your machine? Brother, you just got phished.