4 ms·

> why would you roll your own instead of using a tried and true library For one, the very reason we are all in this thread right now.

• thebean11 5y ago
  Plenty of "roll your own x"s have critical security bugs too, they just don't make the front page of HN. Do you really think, in general, roll your own is safer?
  • jallen_dot_dev 5y ago
    Not in general. Your own cryptography implementation? Hell no. Your own simple logging solution that doesn't need anything fancy from log4j? Probably.
    • thebean11 5y ago
      Simple is..a pretty big stretch for Log4j, even just taking the subset of features that your average medium-sized company would use.