Writing security related code themselves instead of using a battle tested library. Never underestimate how many security holes there can be even in simple looki

Writing security related code themselves instead of using a battle tested library. Never underestimate how many security holes there can be even in simple looking code. The most common one for this is login systems. I've custom written ones with bugs so bad that a blank password worked for every login.