DEV Community

Discussion on: Software security is hopelessly broken

Collapse
 
bgadrian profile image
Adrian B.G.

I was surprised to see that database injection is still #1 in top OWASP 2017 threats, but then again the industry has a big influx of newcomers and the intro learning resources lack in security chapters.

A good thing is that containers and managed services took many issues from our hands into the proper ones, security experts that work for datacenters and service providers.

Collapse
 
bosepchuk profile image
Blaine Osepchuk

I know, right? And it's not just small projects that still has SQL injection vulnerabilities; big companies are still making headlines with them. Here are some recent examples.

Managed services are a good thing overall but I wonder how many teams actually understand the strengths and weaknesses of outsourcing. Are they still thinking about security or just throwing it over the wall and assuming that their providing is doing whatever is required to keep their project safe?