2 ms·
That's probably 10s of thousands of eyes who don't know their arse from their elbow, including the guys who wrote it. Possibly 2-3 people have read it who know
by meaty 14y ago
That's probably 10s of thousands of eyes who don't know their arse from their elbow, including the guys who wrote it.
Possibly 2-3 people have read it who know their shit. The rest are just consumers.
Frameworks only centralise the security concerns - they don't necessarily make it better. That is in the hands of the implementor and their ability to build bullet proof abstractions. One fuck up and your system is globally compromised. It is the right solution, but you need the right people. Rails hasn't had the right people.
- phillmv 14y agoI think you seriously underestimate the sheer quantity of people looking through it, my friend. And if we're using that metric, it's extremely unlikely your average team member knows his or her ass from their elbow, either.
- meaty 14y agoQuite possibly. I agree with your second point, which is why I am a senior member of an architecture team in a company with 80 developers. It's our job to make sure ass and elbow confusion doesn't compromise the product.