Re:Learnings from 5 years of tech startup code audits
by sboomer on Thursday May 26, 2022 @04:22AM
(#31515984)
That's how a software implementation by a newbie works.
You can't expect a newbie to take security into account before the software is implemented.
Instead, there should be a custom to rectify all the security errors in the end before the software is pushed to the server.
[ Parent
| on HN ]
Re:Learnings from 5 years of tech startup code audits
by josephg on Thursday May 26, 2022 @04:26AM
(#31516007)
That’s an almost impossible task. Code gets immensely more expensive to understand or modify based on its age. If you don’t bother thinking about security until the 11th hour, it’s too late. Things will slip through.