Reading Shopify’s approach to keeping their merchant’s secure at their humongous scale seems to come down to the radical standardization of everything. People think this is boring (it isn’t) but it has tons of benefits beyond just security.

One good example with an open sourced tool over at Slack of how they’ve implemented their Security Development Lifecycle to enable their developers to move forward confidently.

The manifesto to choose boring technology in order to be able to solve interesting problems is something to (re-)read regularly until you’ve internalized it.