3 ms·
If you don't know security best practices then learning them on the fly isn't particularly helpful, simply because you don't even know what you don't know. It's
by ChrisSD 8y ago
If you don't know security best practices then learning them on the fly isn't particularly helpful, simply because you don't even know what you don't know. It's much better to accept your ignorance and defer to someone who does know security.
- Alex3917 8y ago> It's much better to accept your ignorance and defer to someone who does know security. Society doesn't currently offer any mechanism to pay for that though. E.g. if you as a developer make a product, you can't force VCs to fund a security audit, nor can you force security folks to work for equity, nor is there any public money available to pay for this.
- arvinsim 8y agoI disagree. It is the onus of companies and managers to give developer enough time to figure this out. If they don't include it in their estimates, don't expect developers to put in their personal time to implement proper security.