5 ms·

You can't fool proof a framework into making it impossible for a developer to make it insecure.

• pekk 14y ago
  Does that mean you have no choice but to choose less secure defaults over more secure ones?
  • deedubaya 14y ago
    Of course not. Don't get me wrong, I'm all about enhancements in secure defaults. But does defaults that can me misused to be insecure mean those defaults are insecure? I don't think so. Just because you can drive a car on the wrong side of the road doesn't mean it is unsafe.
    • dbpatterson 14y ago
      That analogy doesn't make sense. We are talking about defaults. If the car was automated, insecure defaults would be a car that automatically drove on the wrong side of the road, but you could change it to drive on the right side of the road.
    • riquito 14y ago
      nice analogy