3 ms·
The author is right in the domain he's working on, cryptographic security. For those of us making web sites, we often won't know what "right" is until we put s
by brlewis 19y ago
The author is right in the domain he's working on, cryptographic security.
For those of us making web sites, we often won't know what "right" is until we put something in front of users.
- cperciva 19y agoYou might not know what is "right" until you put it in front of users, but at very least you should know that certain things are "not right". Cross-site scripting vulnerabilities fall into the category of "not right" regardless of what your website is supposed to be doing.
- webwright 19y agoThat's true... But you can do your darndest to put something GREAT in front of users... Because the "release early, release often" religion is currently so dominant, it's pretty common to see people release stuff that they KNOW is mediocre with the hopes that their users will help them make it good. The "... if we did it this way, we could get it out the door in a few weeks.." argument is only sound if what you get out the door is a damn good attempt to solve the core problem in the simplest/most effective way possible.