3 ms·
> If developers demand that the tools they use are better built, then the market will deliver tools/frameworks/etc... that are secure from the start. This is n
by notyourday 8y ago
> If developers demand that the tools they use are better built, then the market will deliver tools/frameworks/etc... that are secure from the start.
This is never going to happen because what is considered secure in one place is not considered secure in another place.
> "Good" coding has become "good enough" coding, and the problem exists from the bottom of the stack to the top.
Because it is about risk management, not about absolutes. It is absolutely irrelevant that a smart samsung TV that I have in my office has garbage security because it is used as one thing and one thing only - dumb 48" HDMI monitor not connected to wireless network. Its Wifi antenna connector has been cut. It matches my risk profile.