News for hackers. Stuff that matters.

A comment on Stop deploying web application firewalls. Parent comment

Re:Stop deploying web application firewalls by hug on Monday November 13, 2023 @04:29PM (#38255664)
> magically the code has a become secure!

The code hasn't, but it would be a lie to say that the application hasn't, and as a leader of ops teams while I can't directly influence code security & quality, I can damn sure influence overall security by demanding a WAF.

Defense in depth is an important concept in security for a very good reason.

[ Parent | on HN ]
Re:Stop deploying web application firewalls by outworlder on Monday November 13, 2023 @06:20PM (#38256716)
> The code hasn't, but it would be a lie to say that the application hasn't

It could become less secure too, as WAF software itself can have vulnerabilities or misconfiguration.

[ Parent | on HN ]