In CS most security issues are treated separately from the fundamental engineering core. From the sw engineering standpoint the bridge is solid, if later some c

In CS most security issues are treated separately from the fundamental engineering core. From the sw engineering standpoint the bridge is solid, if later some crooks can use it to extort users or terrorists can easily "make people fall into the water", then that's someone else's job downstream. I know, it sucks. But that's how the entire web was built. Everyday you visit websites from foreign countries and click on extraneous links on HN that run code on your machine, next to a browser tab from your bank account, and nobody cares because it's all sandboxed and we really trust the sandboxing even though it fails once in a while, has unknown bugs, or simply can be bypassed all together by phishing or social engineering.