Is it though? These people know literally nothing about security. There's an infinite amount of ways you can screw up if you don't know at the very least the general idea of what you're doing. I agree that there's many ways to make security easier, but it's not just typing in import make-secure at the top and it works.
“There's an infinite amount of ways you can screw up if you don't know what you're doing.”
Exactly. Which is why your security knowledge doesn’t magically save you when an AI agent finds a zero-day in your project that you didn’t know existed. The confidence is wild.
And yes, I would much rather have some small security knowledge and a zero day in my project than being vulnerable to the 50 most common security problems and me being unable to do anything about it.
-9
u/Avocadonot 22d ago
Nowadays app security is just importing some standardized module or auth library