2 ms·
Hot take, but for me the conclusion always was -- get a big stick and use it to prevent web developers from touching anything near your security sensitive code.
by Muromec 2y ago
Hot take, but for me the conclusion always was -- get a big stick and use it to prevent web developers from touching anything near your security sensitive code. Starting from design, protocols and data formats of it. The set of habits and design considerations simply doesn't match day to day practice of the usual web development. It's often the opposite of what you need to write normal code.
- TZubiri 2y agoI don't think it's fair to blame the skill of web developers (although if they use javascript and leftpaddings they have it coming). The nature of web software is 100 times riskier than anything else because of the risk profiles and 100% connectivity
- chairmansteve 2y agoAnyone who thinks a publically accessible web site is secure is insane.