Comment

Comment by Taek

There is something you can do about it, but it's expensive and different from what you are used to. Safer languages is a good place to start.

Input validation can be made to be machine-verified, and anit-patterns can be learned and avoided. Static analysis tools can raise red and yellow flags.

Finally, frameworks are being built for handling security critical things like account validation, crypto key handling, an related tasks that are important to get right.

As the space continues to evolve, things like this will become less common, and someone who is aware of the trade and is diligent will be less likely to make mistakes.

parent Taek 11 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton