> First of all, who intentionally writes code to contain SQL injection vulnerabilities anno 2024? here's some ways it could happen: - startup doesn't have abi

> First of all, who intentionally writes code to contain SQL injection vulnerabilities anno 2024? here's some ways it could happen: - startup doesn't have ability to hire competent, experienced developers. they end up with rookies with potential but not enough experience to avoid security foot-guns, and/or experienced expert-beginner developers who have a low level of ability - leadership doesn't value quality or security, so the company culture reflects this and focuses on what leadership values - startup outsources development work and has no in-house technical capability to check quality or security of deliverables - startup is pre product-market fit in a domain where security is less relevant, and security issues are less of a risk to the business than the more existential concern around identifying and de-risking a scalable, profitable business model. then suddenly the throwaway proof of concept codebase for the 7th pivot starts getting traction, and by shovelling features on top it is possible to win more customers