3 ms·

No, no it's really not. https://www.owasp.org/index.php/Top_10_2013-Top_10 https://www.owasp.org/index.php/Top_10_2013-Top_10 and that's only Web security.

• vbezhenar 11y ago
  Almost all of those items are exactly what I wrote: do not trust user input.
  • voltagex_ 11y ago
    There has to be a middle ground between saying "security is simple" and "the sky is falling". I think stating things like "don't trust user input" risks things like https://kivikakk.ee/cryptography/2016/02/20/breaking-homegrown-crypto.html https://kivikakk.ee/cryptography/2016/02/20/breaking-homegro... happening. Security is hard, programming is hard, we should all get better at both.
  • deleted 11y ago
    [deleted]
  • x5n1 11y ago
    Session fixation - a commonly-used session-based attack - can be prevented simply by giving a user a new session ID whenever they obtain a new level of permission on a site (for instance, after they successfully login).