Re:Why Security Defects Go Unnoticed During Code Reviews? [pdf]
by not2b on Thursday February 04, 2021 @08:03PM
(#26031818)
I think something real is being observed here and it would be interesting to get to the bottom of it. If they find that more 'experienced' reviewers (however they measure it) are letting more go by, maybe it's overwork, many the same core people are asked to review all of the most tricky cases, maybe time pressure causes them to let things slip by.
[ Parent
| on HN ]
Re:Why Security Defects Go Unnoticed During Code Reviews? [pdf]
by Person5478 on Friday February 05, 2021 @08:47AM
(#26036225)
And maybe the more experienced developers have, over time, developed a better sense of what's important and what's not.
Re:Why Security Defects Go Unnoticed During Code Reviews? [pdf]
by hinkley on Friday February 05, 2021 @12:27PM
(#26038750)
The article is about security vulnerabilities getting past code reviews. Are you saying security is not important and the experienced people are right?
Re:Why Security Defects Go Unnoticed During Code Reviews? [pdf]
by Person5478 on Friday February 05, 2021 @02:41PM
(#26040342)
yes, that's exactly what I'm saying. Anyone who thinks not all "security vulnerabilities" are created equal believes security is just not important.