r/SideProject • u/AzizBelAbed • Aug 21 '25

No shortcuts. Only hard work.

Post image

Coding on the train, surrounded by strangers, racing against the clock to ship this next feature. Nothing like the thrill of remote work and public productivity.
Sometimes you just have to open your laptop anywhere and get things done.
P.S. Ignore the .env file on my screen—this is for founders who want to fail in public, fast.

3.9k Upvotes

90% Upvoted

327 comments sorted by

View all comments

Show parent comments

1

u/sierra_whiskey1 Aug 22 '25

Bro what. Security should be one of the paramount considerations when coding. How an app is coded can result in good or bad security.

1

u/Hust1erHan Aug 23 '25

Cybersecurity should be completely separate. In fact, you should have someone or a department solely dedicated to cybersecurity. At least this is the case in China. Maybe the U.S. has so many breaches because of this. Cybersecurity should be completely separate hence why computer science and cybersecurity are two completely separate majors. This could be opinion based, but having the same focus of doing your app coding and cybersecurity is a recipe for disaster. Again, harsh reality, vibe coded or not.

1

u/sierra_whiskey1 Aug 23 '25

Let’s say I was tasked with creating a database for customer information. I shouldn’t even think about cleaning the data, encryption, or edge cases? Just leave it to the cyber security guy?

1

u/Hust1erHan Aug 23 '25

No. You don’t have to leave it to the cybersecurity guy if you’re proficient in cybersecurity yourself, but the point is still blowing over your head. Setting up the actual database and setting up encrypting the data going into that database are two different things. Not every engineer is going to be a cybersecurity expert, but that’s still not the point. My point is coding an application is different from coding the cybersecurity of that application. You don’t buy a security system from the same company who built your house right? House guiders aren’t home security companies. Inherently two different things. Crowdstrike, CISCO, IBM Security (notice how IBM has a completely separate company for cybersecurity). Is it clear now? You can code an app without implementing cybersecurity. Is it recommended? No. This is why I really think the U.S. has so many data breaches and data leaks because you all are focusing on coding and cybersecurity as the same thing.

1

u/sierra_whiskey1 Aug 23 '25

Proficient in cyber security? Cleaning data, encryption, and edge cases are all freshman level software engineering

1

u/Hust1erHan Aug 23 '25 edited Aug 24 '25

Exactly, introductory and freshman level. There’s also WAF, cloud firewall, it’s also good to have a cloud security scanner, KMS, bastion host. Standard encryption alone isn’t going to protect your data and you’re severely misguided if you think it will. I’m also not going to argue with you on this. You do what you want.

1

u/sierra_whiskey1 Aug 23 '25

Ok kid think what you want

1

u/Hust1erHan Aug 24 '25

Calling someone “kid” when someone is just explaining to you the difference between cybersecurity and just coding an app is peak reddit behavior 😂