4 ms·
No, the developers simply don't realize that there is a vulnerability, even though they have the required knowledge because they look at the code with the "how
by brazzy 4y ago
No, the developers simply don't realize that there is a vulnerability, even though they have the required knowledge because they look at the code with the "how do I implement this feature" mindset (which is their job), not a "how could this be abused" mindset.
- marapuru 4y agoIn addition to the comment above, this mindset is strengthened by time squeezes in development. Which lead to sales, project managers and product owners who prevent developers from actually looking into this.