4 ms·

This. Exactly this. I would hate to work with such people. Taken aback? Bold claim? As a novice developer if someone is declaring their app to be "secure" then

This. Exactly this. I would hate to work with such people. Taken aback? Bold claim? As a novice developer if someone is declaring their app to be "secure" then there is nothing wrong with it. There are two possible scenarios. 1. They've actually made the app really secure. -> Appreciate it. 2. They've probably left a lot of loop holes. They've made it "secure" based on their understanding of security. -> Appreciate it. The feedback be given in a much more positive way by acknowledging their existing work and then giving them few pointers of making the app more secure. If you were taken aback then you're just being cocky. You're not expected to be friendly with anyone. At the same time, there is no need to be condescending. You, as a senior dev, are expected to give positive feedback and mentor the group of new developers.

doktrin 12y ago
> They've probably left a lot of loop holes. They've made it "secure" based on their understanding of security. -> Appreciate it. The feedback be given in a much more positive way by acknowledging their existing work and then giving them few pointers of making the app more secure. If you were taken aback then you're just being cocky. You're injecting my comment into a manufactured scenario. I'm not performing a code review, vulnerability assessment or pen test nor am I the OP's supervisor. I'm sharing my reaction to a web product as a potential consumer. An invalid claim of security causes me to lose trust in the product and its creators. It's as simple as that.