3 ms·
> But if the code is both simple and there is no issue with it, then you can rest assured that there exist no hackers on the face of the earth who can exploit i
by fiatpandas 2y ago
> But if the code is both simple and there is no issue with it, then you can rest assured that there exist no hackers on the face of the earth who can exploit it
Ah yes, security through absolute perfection.
- formerly_proven 2y agosecurity through absolute holistic perfection (STAHP)
- jongjong 2y agoIt's difficult to get there but it's often achievable and worthwhile. When a company is worth billions, what's the cost of aiming to reach perfection? What's the cost of not trying?
- mewpmewp2 2y agoWhat is your experience with that perfection? Have you been able to achieve it in a large org?
- lelanthran 2y agoNevermind a large org, I'd be surprised if you can achieve that perfection in tiny software written in the safest languages reviewed by experienced engineers.
- mewpmewp2 2y agoYeah, even if you review your own code and it happens to be perfect, you probably have quite a bit of dependencies that you definitely don't have time to review.
- DaSHacka 2y agoI'd argue more aptly: what's the cost when this "perfect" solution inevitably fails? If it was easy (or even _possible_) to make perfect computers, I assure you we already would.
- kalleboo 2y agoThe cost is you lose to your competitor who offers features (complexity) instead of security and now all your effort is for naught. People talk a lot about security but nobody actually values it. You just send out some Uber Eats coupons or free Credit Protection vouchers and keep on doing what you were doing and in a month everyone has forgotten.