Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
YouTube Security VideosGoogle Cloud Tech: Gemini is coming to your city(24.09.2026 um 15:00 Uhr)
AI & KI NachrichtenGoogle’s latest moonshot to put machine learning in space(24.09.2026 um 15:12 Uhr)
Windows Tipps & SecurityPoll: What's your favorite Surface of 2026?(24.09.2026 um 14:58 Uhr)
Sichere ProgrammierungStreaming Materialized Views for Live Read Models (2026)(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA Day Is Not 86400 Seconds: The DST Bug in Your Date Math(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungSetting up Traefik: reverse proxy with automatic HTTPS(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA 200 OK response does not prove a secret leak(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungHow hot do you like it?(24.09.2026 um 15:05 Uhr)
YouTube Security VideosGoogle Cloud Tech: Gemini is coming to your city(24.09.2026 um 15:00 Uhr)
AI & KI NachrichtenGoogle’s latest moonshot to put machine learning in space(24.09.2026 um 15:12 Uhr)
Windows Tipps & SecurityPoll: What's your favorite Surface of 2026?(24.09.2026 um 14:58 Uhr)
Sichere ProgrammierungStreaming Materialized Views for Live Read Models (2026)(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA Day Is Not 86400 Seconds: The DST Bug in Your Date Math(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungSetting up Traefik: reverse proxy with automatic HTTPS(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA 200 OK response does not prove a secret leak(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungHow hot do you like it?(24.09.2026 um 15:05 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

Software engineering is an interwoven part of the loop

In my computer science studies at university, I learned that about two thirds of all software projects are neither delivered on time nor within budget. At the time, this seemed ridiculous to me. It doesn't anymore, despite having worked…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

In my computer science studies at university, I learned that about two thirds of all software projects are neither delivered on time nor within budget. At the time, this seemed ridiculous to me. It doesn't anymore, despite having worked with many smart people for ten years since.



How can this be? Poor handovers? Weak business ideas? Broken feedback loops? My overall guess is that we excel within our own specialties but lack interest and insights into the full value chain needed for a successful digital product. Engineering excellence alone is rarely enough.



In this article, I invite you to follow my thoughts and share a set of recommendations for leveling up.






TLDR - My key takeaways





  • User-centered design is important. The famous DORA 2024 Accelerate State of DevOps report even highlights this as the most important skill.

  • Socio-technical skills are important.

  • AI is a rapidly evolving, exciting technology that can help us to get out ideas faster.

  • I recommend to explore different disciplines along the complete value chain.






1. What are we building?



The obvious goal is to develop a product for customers. In most cases we also want revenue to exceed costs. So, we need to find a problem people are both eager to solve and willing to pay for.



This sounds easy, yet is probably the hardest part. Consider two examples:




If I had asked people what they wanted, they would have said faster horses (Henry Ford)




In retrospect, investing into automobile development, like Ford did, was an obvious call. As contrasting example:




I think there is a world market for maybe five computers (Thomas Watson, chairman of IBM)




In retrospect, this is an obviously ridiculous bad call.



However, at the time these decisions were made, uncertainty was high, information was incomplete, and outcomes were far from obvious. Product development lives in the uncomfortable space between insight, intuition and incomplete data.



How can we improve our chances for those calls upfront? This is a science on its own and one which is still evolving. Three personal recommendations for leveling up:




  1. The Mom Test: How to Talk to Customers & Learn if Your Business is a Good Idea When Everyone is Lying to You

  2. Competing Against Luck


  3. Product Design (UX/UI) Course - my learning journey was really great and all my exercises finally came together into Together, We Choose






2. Exploration and feedback loops



If we do not excel in the previous part - understanding what we are building - software development will suffer. Requirements will change frequently, chosen architecture trade-offs will be based on false assumptions and become anti-trades. Preventing this early drift is paramount!



Therefore, we need to explore and gather feedback as quickly as possible. This can be some user interviews, paper prototypes, digital prototypes, whatever works to evaluate your idea and reduce uncertainty.



At the latest when you are ready to invest in digital prototypes or early versions, software developers usually enter the picture. The goal is not to build the full product with a perfect architecture. Instead, the architecture must support ongoing exploration.



Exploration likely requires collaboration across roles. Business analysts, customers, designers, developers, investors, managers, etc. need to work together: Come up with ideas, hand them over, build experiments, evaluate outcomes and exchange knowledge again and again. For that, engineering excellence alone is obviously not enough. We need short, effective feedback loops and people skills to profit from everyone's expertise. In the bigger picture, it is often beneficial to deliberately accept technical debts as trade-off for faster exploration.



As a side note: AI can help you to generate ideas and lately even generate full prototypes for exploration. However, don't mistake those little generated apps as production ready, secure, bug free, cash-cow apps - if it were that simple, users could prompt the AI themselves instead of giving you their money. And AI-slop, bugs, security incidents, etc. can irreparably damage user confidence in you and your product, like the gigantic nx s1ngularity incident caused by an AI implemented mini feature.



One of the core ideas of the Agile movement is to encourage feedback loops and maximize the amount of work not done aka waste. I strongly agree with these principles. However, in my humble opinion, parts of the surrounding consulting industry have diluted the message over time. I recommend to level up in the terms user-centered design and socio-technical skills, e.g. with:








3. Engineering excellence



Once, we have managed to create a valuable product, we need to maintain and evolve it. In reality, we have likely already sacrificed the cleanliness of a greenfield project in favor of exploration and evaluation. Therefore, we need engineering skills to navigate and improve.



Technical perfection in software development does not exist, and even if it did, it would probably be a waste of money. The goal is to improve structure, reduce risk, and increase the system’s ability to change, so we can continuously support the ongoing product exploration and development.



This also has a socio-technical component: If you change something, you may overlook some previous trade-offs which still hold value. Teams can get tired of yet another change. Or you may unintentionally hurt someone’s feelings by questioning decisions they once made under very different constraints.



Resources I recommend for leveling up technical expertise:








Final call-out



I'm curious about your thoughts. Your feedback is very welcome. Feel free to comment here and connect with me on bsky.

CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
SOC Incident Playbook: Remote Code Execution (RCE) Defense
title: Detect Exploitation - Software engineering is an interwoven part of the loop
id: 9e980fce-686d-43fa-bc43-cb2ca60c7d1e
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "Software engineering is an int" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Software engineering is an interwoven pa.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Software engineering is an interwoven part of the loop

Thematisch verwandte Begriffe: Software, engineering, interwoven, part · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97179 | A security vulnerability has been detected in O2OA up to 9.5.3/10.0.2. T…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick