3 ms·
> It's much better to accept your ignorance and defer to someone who does know security. Society doesn't currently offer any mechanism to pay for that though.
by Alex3917 8y ago
> It's much better to accept your ignorance and defer to someone who does know security.
Society doesn't currently offer any mechanism to pay for that though. E.g. if you as a developer make a product, you can't force VCs to fund a security audit, nor can you force security folks to work for equity, nor is there any public money available to pay for this.
- arvinsim 8y agoI disagree. It is the onus of companies and managers to give developer enough time to figure this out. If they don't include it in their estimates, don't expect developers to put in their personal time to implement proper security.