3 ms·
That's a loaded question if I've ever seen one. Developers care about a lot of things, including security. Most of them care way too much. Sometimes they even d
by locallost 4y ago
That's a loaded question if I've ever seen one. Developers care about a lot of things, including security. Most of them care way too much. Sometimes they even deliver things that are crappy to use because it was a challenge to get it done at all. Doesn't mean they don't care about users either.
Security is important but for most things it's not the most important thing. Useful but insecure can be used for something. Useless but secure can't.
- thinkharderdev 4y ago"Security" is not an atomic property of software. And while there are a lot of difficult tradeoffs between security and usability there are also a lot of low hanging fruit where entire classes of threat can be mitigated with zero tradeoff for user experience (and sometimes zero tradeoff for developer productivity if the system is built from the start with security in mind). To take a trivial example, hashing (with an appropriately secure algorithm) and salting passwords stored in your database. Or using prepared statements instead of manually building SQL queries. These are things that can effectively eliminate entire classes of vulnerability and are basically free to do.