Ask HN: Whats a Build vs. Buy decision that you got wrong?

Re:Ask HN: Whats a Build vs. Buy decision that you got wrong? by rsstack on Wednesday December 28, 2022 @01:29PM (#34164050)

I twice worked at companies that built authentication as part of their application (using open source libraries, not from scratch). It's a mistake, and a mistake that's very expensive to fix later. Even more expensive not to fix given the sensitivity of this area of software.

[ Parent | on HN ]

Re:Ask HN: Whats a Build vs. Buy decision that you got wrong? by jokethrowaway on Friday December 30, 2022 @03:32PM (#34189735)

All the companies I worked with in the last 15 years had custom auth (all bcrypt in the end).

Nothing bad ever happened. They're still rocking the same system and the only notable change that went through was adapting to gdpr deletion requests. And they all avoided that okta hack from some time ago.

What's expensive mistake are you talking about?

[ Parent | on HN ]