4 ms·
In principle, sites should be secure. In practice, putting an implicit bug bounty on every widely-used Javascript library does produce more exploitation. I thi
by JoachimSchipper 9y ago
In principle, sites should be secure. In practice, putting an implicit bug bounty on every widely-used Javascript library does produce more exploitation.
I think you missed an opportunity to engage your parent comment more productively.
- IncRnd 9y agoWhat principle states sites should be secure? There is hardly even a nod to security, no defense in depth, and no cryptographic protections. There is widespread loading of untrusted unvetted code. The operating principle of the web seems to be, "it's okay to do this, everyone else is."