+1 I have been told that I did not understood agile/scrum rules because during code reviews of django/pylons frameworks I was spotting the SQL and shell inject

+1 I have been told that I did not understood agile/scrum rules because during code reviews of django/pylons frameworks I was spotting the SQL and shell injections. It seems agile is the new death of problem solving by suffocating with hugs of being nice. But believe me: there is no way a 150k$/year coder will take nicely a 50k$/year coder says : there is an obvious security flaw coming from your usual coding practice. Apparently the way in python communities to avoid injection is security by fight club rules. 1st rules you do not talk of SQL injections 2nd rules you take an ORM that supports sanitizing of arguments, but you do not use it. I have been profoundly chocked at how my experience of python, the same as my experience of PHP is impacted by the social pressure of the «norms». People being pissed at my remarks always then pointed at me not using integrally PEP8/pylint/flakes (even though I use pylint to catch only potential errors). Something is rotten when programming is not about designing/coding/correcting anymore but just about following fashions and trends. But that is the way, I guess, some remains the king of the hill and can buy their expensive cars.