5 ms·
This post says "it's insecure if you do it wrong". Well.....
by forgottenacc57 10y ago
This post says "it's insecure if you do it wrong".
Well.....
- keithwhor 10y agoI hear where you're coming from... but this is also the bane of developer existence. We all have to accept that, every year, tens of thousands of new developers looking for jobs enter the market. There's such a demand for developers that these people get jobs. So footguns, as much as we like to play high-and-mighty and say, "well, duh, don't shoot yourself in the foot" are a real, existential risk to a lot of companies.
- true_religion 10y agoI was under the impression that newly minted developers would use existing libraries and frameworks, which have already take security into account.
- saint_fiasco 10y agoThe article points out that many popular libraries have vulnerabilities and unsafe defaults.
- lostcolony 10y agoWhich to me says that relying on there not being any footguns is wishful thinking. The better recourse, to my mind, is to stress the need for mentorship, so people learn to proactively look out for traps.
- detaro 10y agoA standard that best case doesn't explain the risks properly (so many implementers get it wrong) and worst case prescribes dangerous behavior isn't a very good standard. Especially in a field where many developers are told over and over again to rely on standards, it really should spell out even tiny issues.