News for hackers. Stuff that matters.

A comment on Show HN: Zero – A fast, zero-configuration server for React, Node.js, Markdown. Parent comment

Re:Show HN: Zero – A fast, zero-configuration server for Rea... by insulfrable on Tuesday February 26, 2019 @02:27PM (#19257497)
Maybe security people are getting tired of inconsiderate developers that keep shipping bazillions of insecure packages all over mission critical applications.

Devs need to change their culture. This behavior is actively harming end-users through repeated data breaches.

[ Parent | on HN ]
Re:Show HN: Zero – A fast, zero-configuration server for Rea... by joshstrange on Tuesday February 26, 2019 @02:38PM (#19257595)
Do you honestly think it is developer's "inconsiderate" behavior that the root cause or even a main factor in the "repeated data breaches"?
[ Parent | on HN ]
Re:Show HN: Zero – A fast, zero-configuration server for Rea... by insulfrable on Tuesday February 26, 2019 @02:45PM (#19257655)
Partly yes. They certainly have a professional responsibility to write applications that resist well known attacks, such as directory traversal, xss, sqli, etc.

This isn't new, and not knowing how to deal with it is like a builder not knowing how to safely stand up a wall.

[ Parent | on HN ]