4 ms·
>Unskilled developers will always write insecure code, despite what language they are using. They - uhh I mean - we won't if it's impossible.
by vpkaihla 11y ago
>Unskilled developers will always write insecure code, despite what language they are using.
They - uhh I mean - we won't if it's impossible.
- blueflow 11y agoThen explain me how you would make an Language inherently immune to string injections.
- tinco 11y agoYou can make a language inherently resistant to string injections. You only need library authors to cooperate and an extension to your string type like Ruby does, to have your language reject thoughtless injection vulnerabilities.
- blueflow 11y agoIts possible, but if these solution make an language that secure, why haven't them caught on yet? Back to my point: Tools can't replace knowledge. A fool with an tool is still a fool.
- vpkaihla 11y agoAre you claiming that unless we erase all security problems, it was all for nothing?